Showing 1 - 2 of 2

CVE-2020-24217

Status Candidate

Overview

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Related Files

HiSilicon Video Encoder Malicious Firmware Code Execution: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote code execution vulnerability via an unauthenticated upload of malicious firmware. Versions affected are vendor specific.; tags | exploit, remote, code execution; advisories | CVE-2020-24217; SHA-256 | 384e22525b81d6f4822dbfd6fa1cdc9aecf7027e3c101cb17860228413f1a996; Download | Favorite | View

HiSilicon Video Encoder Command Injection: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote command injection vulnerability. Versions affected are vendor specific.; tags | exploit, remote; advisories | CVE-2020-24217; SHA-256 | aafacb19bd515d145364bc7d88da7249a61ab2490442a5ff54b6a6e8292dab6d; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 248 files
Ubuntu 87 files
Gentoo 31 files
Debian 19 files
tmrswrr 10 files
Sina Kheirkhah 7 files
Rodolfo Tavares 4 files
bRpsd 4 files
Google Security Research 3 files
jheysel-r7 3 files

File Archives

Systems

AIX (429)
Apple (2,090)
BSD (376)
CentOS (58)
Cisco (1,927)
Debian (7,080)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,531)
HPUX (880)
iOS (376)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,409)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,312)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,667)
UNIX (9,427)
UnixWare (187)
Windows (6,666)
Other

CVE-2020-24217

Overview

Related Files

File Archive:

July 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems