An issue was discovered in the box appli... CVE-2020-24217

7.5 AV AC AU C I A
发布： 2020-10-06
修订： 2024-11-21

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

0%

漏洞利用/PoC

当前有6条漏洞利用/PoC

受影响的平台与产品

当前有105条受影响产品信息