Puwell IP Camera 4.x DebugShell Command Injection

Puwell IP Camera firmware versions 2.x through 4.x contain an unauthenticated command injection vulnerability in the DebugShell interface on TCP port 34567. The supplied proof of concept sends JSON commands to demonstrate execution. https://packetstorm.news/download/238662...