| 제목 | Faraday Technology DVR GM828x, GM8181 OS Command Injection |
|---|
| 설명 | The Faraday Technology GM828x/GM8181 DVR devices have been found to contain a command injection vulnerability within the ntp_srv parameter. This vulnerability may allow an attacker to execute arbitrary system commands on the device with the privileges of the NTP process via a network command protocol, affecting over 27,000 Internet-connected devices. |
|---|
| 원천 | ⚠️ https://netsecfish.notion.site/Command-Injection-in-Faraday-Technology-GM828x-GM8181-DVR-1bc02d17ee5540a08273da2850e809c4?pvs=4 |
|---|
| 사용자 | netsecfish (UID 64568) |
|---|
| 제출 | 2024. 04. 29. PM 02:02 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 05. 07. AM 06:57 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 263304 [Faraday GM8181/GM828x 까지 20240429 NTP Service ntp_srv 권한 상승] |
|---|
| 포인트들 | 16 |
|---|