Lucene search
PRIOn knowledge basePRION:CVE-2023-6895HistoryDec 17, 2023 - 8:15 a.m.
Command injection
2023-12-1708:15:00
PRIOn knowledge base
www.prio-n.com
5
command injection
hikvision
vulnerability
intercom broadcasting system
os command injection
upgrade
vdb-248254
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| intercom_broadcast_system | ge | 3.0.3 | |
| intercom_broadcast_system | lt | 4.1.0 |
Related
cve
cve
CVE-2023-6895
2023-12-17 08:15:07
nuclei
nuclei
Hikvision IP ping.php - Command Execution
2024-02-29 18:07:31
nvd
nvd
CVE-2023-6895
2023-12-17 08:15:07
githubexploit
githubexploit
Exploit for OS Command Injection in Hikvision Intercom Broadcast System
2024-02-07 09:28:10
cvelist
cvelist