Lucene search
PRIOn knowledge basePRION:CVE-2020-24217HistoryOct 06, 2020 - 2:15 p.m.
Command injection
2020-10-0614:15:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.
Related
packetstorm
packetstorm
HiSilicon Video Encoder Malicious Firmware Code Execution
2020-10-19 00:00:00
HiSilicon Video Encoder Command Injection
2020-10-19 00:00:00
cve
cve
CVE-2020-24217
2020-10-06 14:15:12
checkpoint_advisories
checkpoint_advisories
Szuray Video Encoder Firmware Command Injection (CVE-2020-24217)
2020-11-11 00:00:00
nvd
nvd
CVE-2020-24217
2020-10-06 14:15:12
cvelist
cvelist
CVE-2020-24217
2020-10-06 13:05:36
exploitdb
exploitdb
HiSilicon Video Encoders - RCE via unauthenticated command injection
2020-10-19 00:00:00
cert
cert
IPTV encoder devices contain multiple vulnerabilities
2020-09-15 00:00:00