Exploit for Out-of-bounds Write in Xiongmaitech Nbd6808T-Pl_Firmware

Proof of Concept for CV...

CVE-2022-45460: Out-of-bounds Write

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow an unauthenticated and remote user to exploit a stack-based buffer overflow and crash the web server, resulting in a system reboot. An unauthenticat...

CVE-2022-45045: Improper Neutralization of Special Elements used in an OS Command

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

多款Xiongmai设备操作系统命令注入漏洞

Xiongmai NVR devices are a series of network video recorders from China-based Xiongmai Technology Xiongmai. A security vulnerability exists in several Xiongmai NVR devices. An attacker can exploit this vulnerability to execute arbitrary commands as root user. The following products and versions a...