| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
| Compro Technology IP Camera - (killps.cgi) Denial of Service Exploit | 2 Sep 202100:00 | – | zdt | |
| CVE-2021-40378 | 21 Sep 202104:41 | – | circl | |
| comppro IP70 安全漏洞 | 1 Sep 202100:00 | – | cnnvd | |
| Compro Technology IP Camera Denial Of Service (CVE-2021-40378) | 29 Sep 202100:00 | – | checkpoint_advisories | |
| CVE-2021-40378 | 1 Sep 202117:15 | – | cve | |
| CVE-2021-40378 | 1 Sep 202117:15 | – | cvelist | |
| Compro Technology IP Camera - 'killps.cgi' Denial of Service (DoS) | 2 Sep 202100:00 | – | exploitdb | |
| CVE-2021-40378 | 1 Sep 202118:15 | – | nvd | |
| Code injection | 1 Sep 202118:15 | – | prion |
`# Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service (DoS)
# Date: 2021-09-30
# Exploit Author: icekam,xiao13,Rainbow,tfsec
# Software Link: http://www.comprotech.com.hk/
# Version: Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, TN540
# CVE : CVE-2021-40378
There is a backdoor prefabricated in the device in this path. Accessing the
file through the browser after logging in will cause the device to delete
all data (including the data of the camera itself).
Payload:Visit this page after logging in
/cgi-bin/support/killps.cgi
please refer to:
https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation