CVE-2020-24219

🗓️ 06 Oct 2020 13:16:05Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 68 Views🌐 WEB

An issue in URayTech IPTV encoder allows unauthorized file retrieval

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-24219	21 Feb 202512:27	–	circl
Check Point Advisories	Arbitrary Command Injection Over HTTP Traffic (CVE-2020-19165; CVE-2020-24219; CVE-2020-28477; CVE-2021-26747; CVE-2021-27328)	24 Feb 202100:00	–	checkpoint_advisories
Cvelist	CVE-2020-24219	6 Oct 202013:16	–	cvelist
Exploit DB	HiSilicon Video Encoders - Unauthenticated file disclosure via path traversal	19 Oct 202000:00	–	exploitdb
NVD	CVE-2020-24219	6 Oct 202014:15	–	nvd
OpenVAS	HiSilicon Encoder Directory Traversal Vulnerability - Active Check	24 Sep 202000:00	–	openvas
OSV	CVE-2020-24219	6 Oct 202014:15	–	osv
Packet Storm	HiSilicon Video Encoder 1.97 File Disclosure / Path Traversal	19 Oct 202000:00	–	packetstorm
Prion	Path traversal	6 Oct 202014:15	–	prion
CERT	IPTV encoder devices contain multiple vulnerabilities	15 Sep 202000:00	–	cert

NVD

Node

szuray iptv/h.264_video_encoder_firmwareRange≤1.97

AND

szuray uaioe264-1uMatch-

szuray uce264-1-miniMatch-

szuray uce264-1wb-miniMatch-

szuray uce264-4-1uMatch-

szuray uce264-8-1uMatch-

szuray uhae264-16Match-

szuray uhce264-1Match-

szuray uhce264-16p32Match-

szuray uhce264-1p2Match-

szuray uhce264-1p2-1uMatch-

szuray uhce264-1sMatch-

szuray uhce264-1wMatch-

szuray uhce264-1wsMatch-

szuray uhce264-4p8Match-

szuray uhe264-1-4kMatch-

szuray uhe264-16Match-

szuray uhe264-16l-3uMatch-

szuray uhe264-16s-2uMatch-

szuray uhe264-1lMatch-

szuray uhe264-1l-4kMatch-

szuray uhe264-1lwMatch-

szuray uhe264-1sMatch-

szuray uhe264-1s-miniMatch-

szuray uhe264-1w-miniMatch-

szuray uhe264-1wb-4gMatch-

szuray uhe264-1wb-miniMatch-

szuray uhe264-1wbs-2bMatch-

szuray uhe264-1wbs-miniMatch-

szuray uhe264-1ws-miniMatch-

szuray uhe264-2-1uMatch-

szuray uhe264-4Match-

szuray uhe264-4-1uMatch-

szuray uhe264-4l-1uMatch-

szuray uhe264-8Match-

szuray uhe264-8-1uMatch-

szuray uhe264-8l-3uMatch-

szuray uhe264-8s-2uMatch-

szuray use264-16-3uMatch-

szuray use264-1lMatch-

szuray use264-1l-1uMatch-

szuray use264-1l-miniMatch-

szuray use264-1lwMatch-

szuray use264-1wb-lMatch-

szuray use264-4l-1uMatch-

szuray use264-8-1uMatch-

szuray uve264-1lMatch-

szuray uve264-1lwMatch-

Node

szuray iptv/h.265_video_encoder_firmwareRange≤1.97

AND

szuray uaioe265-1uMatch-

szuray uhae265-1-miniMatch-

szuray uhae265-1wb-miniMatch-

szuray uhae265-4-1uMatch-

szuray uhe265-1Match-

szuray uhe265-1-1uMatch-

szuray uhe265-1-4kMatch-

szuray uhe265-1-miniMatch-

szuray uhe265-16-3uMatch-

szuray uhe265-16l-3uMatch-

szuray uhe265-1lMatch-

szuray uhe265-1lwMatch-

szuray uhe265-1s-4kMatch-

szuray uhe265-1s-miniMatch-

szuray uhe265-1wMatch-

szuray uhe265-1w-4kMatch-

szuray uhe265-1w-miniMatch-

szuray uhe265-1wb-4gMatch-

szuray uhe265-1wb-miniMatch-

szuray uhe265-1wbs-miniMatch-

szuray uhe265-2-1uMatch-

szuray uhe265-4Match-

szuray uhe265-4-1uMatch-

szuray uhe265-4sMatch-

szuray uhe265-4s-1uMatch-

szuray uhe265-8-1uMatch-

szuray uhe265-8l-3uMatch-

szuray uhe265-8s-1uMatch-

szuray uhse265-1uMatch-

szuray use265-1-1uMatch-

szuray use265-1-miniMatch-

szuray use265-16l-3uMatch-

szuray use265-1lMatch-

szuray use265-1l-1uMatch-

szuray use265-1l-miniMatch-

szuray use265-1lwMatch-

szuray use265-1w-miniMatch-

szuray use265-1wb-4gMatch-

szuray use265-1wb-lMatch-

szuray use265-1wb-miniMatch-

szuray use265-2-1uMatch-

szuray use265-4-1uMatch-

szuray use265-4l-1uMatch-

szuray use265-8-1uMatch-

szuray uve265-1Match-

szuray uve265-1wMatch-

Source	Link
kb	www.kb.cert.org/vuls/id/896979
packetstormsecurity	www.packetstormsecurity.com/files/159595/HiSilicon-Video-Encoder-1.97-File-Disclosure-Path-Traversal.html
kojenov	www.kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/

Parameter	Position	Path	Description	CWE
filepath	path	/../../sys/devices/media/13070000.jpgd/../../../..$2	Unauthenticated path traversal to disclose files via crafted HTTP request	CWE-22

21 Nov 2024 05:14Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

CVSS 27.8

EPSS0.25223