Open redirect

2022-04-0623:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.

CPENameOperatorVersion
ahb7008t-mh-v2_firmwareeq4.2.0-r11.7601-nat-onvifc.20170420
ahb7804r-els_firmwareeq4.2.0-r11-nat-onvifc.20160422
ahb7804r-lms_firmwareeq4.2.0-r11-nat-onvifc.20170301
ahb7804r-mh-v2_firmwareeq4.2.0-r11.7601-nat-onvifc.20170424
ahb7808r-ms-v2_firmwareeq4.2.0-r11-nat-onvifc.20170327
ahb7808r-ms_firmwareeq4.2.0-r11-nat-onvifc.20170328
ahb7808t-ms-v2_firmwareeq4.2.0-r11-nat-onvifc.20161205
hi3518e_50h10l_s39_firmwareeq4.2.r12.nat.onvifs.20170727-all

Name	Operator	Version
ahb7008t-mh-v2_firmware	eq	4.2.0-r11.7601-nat-onvifc.20170420
ahb7804r-els_firmware	eq	4.2.0-r11-nat-onvifc.20160422
ahb7804r-lms_firmware	eq	4.2.0-r11-nat-onvifc.20170301
ahb7804r-mh-v2_firmware	eq	4.2.0-r11.7601-nat-onvifc.20170424
ahb7808r-ms-v2_firmware	eq	4.2.0-r11-nat-onvifc.20170327
ahb7808r-ms_firmware	eq	4.2.0-r11-nat-onvifc.20170328
ahb7808t-ms-v2_firmware	eq	4.2.0-r11-nat-onvifc.20161205
hi3518e_50h10l_s39_firmware	eq	4.2.r12.nat.onvifs.20170727-all

References

www.xiongmaitech.com/en/index.php/news/info/12/68