HIKVISION-iVMS 漏洞

严重2023/10/20

Hikvision iVMS-8700 - File Upload Remote Code Execution

Arbitrary file upload vulnerability in HIKVISION iVMS-8700 Integrated Security Management Platform Software allows attackers to upload and execute malicious files, leading to potential unauthorized server control.

HIKVISION-iVMSPoC 已收录EXP 已收录

CVSS—

严重2023/10/20

Hikvison iVMS - File Upload Bypass

Hikvision iVMS integrated security system has a vulnerability that allows arbitrary file uploads. Attackers can exploit this vulnerability by obtaining the encryption key to create a forged token. By using the forged token, they can make requests to the "/resourceOperations/upload" interface to upload files of their choice. This can lead to gaining unauthorized webshell access on the server, enabling remote execution of malicious code.

HIKVISION-iVMSPoC 已收录

CVSS—

HIKVISION-iVMS

关联漏洞

Hikvision iVMS-8700 - File Upload Remote Code Execution

Hikvison iVMS - File Upload Bypass