Showing 1 - 2 of 2

CVE-2020-24217

Status Candidate

Overview

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Related Files

HiSilicon Video Encoder Malicious Firmware Code Execution: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote code execution vulnerability via an unauthenticated upload of malicious firmware. Versions affected are vendor specific.; tags | exploit, remote, code execution; advisories | CVE-2020-24217; SHA-256 | 384e22525b81d6f4822dbfd6fa1cdc9aecf7027e3c101cb17860228413f1a996; Download | Favorite | View

HiSilicon Video Encoder Command Injection: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote command injection vulnerability. Versions affected are vendor specific.; tags | exploit, remote; advisories | CVE-2020-24217; SHA-256 | aafacb19bd515d145364bc7d88da7249a61ab2490442a5ff54b6a6e8292dab6d; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 275 files
indoushka 177 files
Jay Turla 150 files
Ubuntu 77 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
H D Moore 31 files
Gentoo 25 files
Karn Ganeshen 23 files

File Archives

Systems

AIX (430)
Apple (2,115)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,125)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,592)
HPUX (881)
iOS (390)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,327)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (16,893)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,867)
UNIX (9,458)
UnixWare (188)
Windows (6,772)
Other

CVE-2020-24217

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems