CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Zuerst die SessionID für einen Gastbenutzer erhalten. Wir können die SessionID aus jeder HTTP-Anfrage finden. Zum Beispiel: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With:...

CVE-2017-14263

Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user...