CVE-2024-0778

CVE-2024-0778 affects Uniview ISC 2500-S (up to 20210930) via the function setNatConfig in /Interface/DevManage/VM.php. Manipulating the arguments natAddress, natPort, or natServerPort results in OS command injection. The vulnerability has been publicly disclosed and is being observed in the wild...

uniview ISC2500-S security vulnerability

The uniview ISC2500-S is a network device from China Uniview Technology uniview. A network DVR. A security vulnerability exists in the Uniview ISC 2500-S, which originates from a security issue in the setNatConfig function in /Interface/DevManage/VM.php, which leads to operating system command...

CVE-2024-0778: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...