Showing 1 - 2 of 2

CVE-2020-24217

Status Candidate

Overview

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Related Files

HiSilicon Video Encoder Malicious Firmware Code Execution: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote code execution vulnerability via an unauthenticated upload of malicious firmware. Versions affected are vendor specific.; tags | exploit, remote, code execution; advisories | CVE-2020-24217; SHA-256 | 384e22525b81d6f4822dbfd6fa1cdc9aecf7027e3c101cb17860228413f1a996; Download | Favorite | View

HiSilicon Video Encoder Command Injection: Posted Oct 19, 2020; Authored by Alexei Kojenov; HiSilicon Video Encoder suffers from a remote command injection vulnerability. Versions affected are vendor specific.; tags | exploit, remote; advisories | CVE-2020-24217; SHA-256 | aafacb19bd515d145364bc7d88da7249a61ab2490442a5ff54b6a6e8292dab6d; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 234 files
indoushka 108 files
Ubuntu 87 files
Gentoo 36 files
Jasper Nota 25 files
Debian 20 files
Willem Westerhof 19 files
Jim Blankendaal 11 files
Martijn Baalman 9 files
Apple 9 files

File Archives

Systems

AIX (429)
Apple (2,099)
BSD (377)
CentOS (58)
Cisco (1,927)
Debian (7,100)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,567)
HPUX (880)
iOS (378)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (50,789)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,546)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,754)
UNIX (9,437)
UnixWare (187)
Windows (6,674)
Other

CVE-2020-24217

Overview

Related Files

File Archive:

August 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems