291 matches found
Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai
The Qualys Threat Research Unit has uncovered a large-scale, ongoing operation within the Mirai campaign, dubbed Murdoc Botnet. This variant exploits vulnerabilities targeting AVTECH Cameras and Huawei HG532 routers. It demonstrates enhanced capabilities, exploiting vulnerabilities to compromise...
Mirai Variant Murdoc Botnet Exploits AVTECH IP Cameras and Huawei Routers
Cybersecurity researchers have warned of a new large-scale campaign that exploits security flaws in AVTECH IP cameras and Huawei HG532 routers to rope the devices into a Mirai botnet variant dubbed Murdoc Botnet. The ongoing activity "demonstrates enhanced capabilities, exploiting vulnerabilities...
Exploit for Command Injection in Avtech Avm1203_Firmware
EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029...
Exploit for Command Injection in Avtech Avm1203_Firmware
PoC tool for exploiting CVE-2024-7029 in AvTech devices 🎤...
AVTECH 744 DVR Account Information Retrieval
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AVTECH 744 DVR Account Information Retrieval', 'Description' = %q This module will extract the account information from the AVTECH 744 DVR device...
Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks
A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them into a botnet. CVE-2024-7029 CVSS score: 8.7, the vulnerability in question, is a "command injection vulnerability found in the brightness function of AVTECH closed-circui...
AVTECH AVM1203 Full Access
The vulnerability of the IP camera software of AVTECH AVM1203 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...
CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)
Commands can be injected over the network and executed without authentication...
CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)
Commands can be injected over the network and executed without authentication...
CVE-2024-7029
Commands can be injected over the network and executed without authentication. Recent assessments: ccondon-r7 at September 17, 2024 11:39pm UTC reported: TL;DR: Unpatched command injection vulnerability in an end-of-life IP camera, being exploited to drop a Mirai botnet malware variant. Public Po...
AVTECH IP camera command injection vulnerability
AVTECH IP camera is a series of network security cameras from AVTECH. AVTECH IP camera suffers from a command injection vulnerability that originates from commands that can be injected over the network and executed without authentication...
CISA Releases Nine Industrial Control Systems Advisories
CISA released nine Industrial Control Systems ICS advisories on August 1, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-214-01 Johnson Controls exacqVision Client and exacqVision Server ICSA-24-214-02 Johnso...
AVTECH IP camera
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor : AVTECH SECURITY Corporation Equipment : IP camera Vulnerability : Command Injection 2. RISK EVALUATION Successful exploitation of this...
PT-2024-5360
The vulnerable software is AVTECH IP cameras, specifically the AVM1203 model. This flaw allows malicious actors to execute command injections remotely, granting them elevated privileges on the target system. The vulnerability is exploited through the brightness function of the camera, enabling...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33471
The AVTECH Room Alert 4E (version v4.4.0 ) is vulnerable to the cleartext transmission of sensitive information. An attacker with administrative access can modify the mail server host to an attacker-controlled IP; when the device attempts authentication, it passes SMTP credentials in plaintext to...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2024-33470
An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in plaintext via a passback attack. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...