Lucene search
MitreCVELIST:CVE-2020-24217HistoryOct 06, 2020 - 1:05 p.m.
CVE-2020-24217
2020-10-0613:05:36
mitre
www.cve.org
3
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.
Related
checkpoint_advisories
checkpoint_advisories
Szuray Video Encoder Firmware Command Injection (CVE-2020-24217)
2020-11-11 00:00:00
cve
cve
CVE-2020-24217
2020-10-06 14:15:12
packetstorm
packetstorm
HiSilicon Video Encoder Malicious Firmware Code Execution
2020-10-19 00:00:00
HiSilicon Video Encoder Command Injection
2020-10-19 00:00:00
prion
prion
Command injection
2020-10-06 14:15:00
nvd
nvd
CVE-2020-24217
2020-10-06 14:15:12
exploitdb
exploitdb
HiSilicon Video Encoders - RCE via unauthenticated command injection
2020-10-19 00:00:00
cert
cert
IPTV encoder devices contain multiple vulnerabilities
2020-09-15 00:00:00