CVE-2024-0778

CVE-2024-0778 affects Uniview ISC 2500-S (up to 20210930) via the function setNatConfig in /Interface/DevManage/VM.php. Manipulating the arguments natAddress, natPort, or natServerPort results in OS command injection. The vulnerability has been publicly disclosed and is being observed in the wild...

uniview ISC2500-S security vulnerability

The uniview ISC2500-S is a network device from China Uniview Technology uniview. A network DVR. A security vulnerability exists in the Uniview ISC 2500-S, which originates from a security issue in the setNatConfig function in /Interface/DevManage/VM.php, which leads to operating system command...