| Название | NUUO NUUO Came handle_config.php Command Injection |
|---|
| Описание | The handle_config.
php file in NUUO cameras is vulnerable to command execution.
Attackers can exploit this vulnerability by crafting specific HTTP requests to
execute arbitrary commands on the target system. This vulnerability can be
exploited without authentication and affects a wide range of devices used globally
by multiple subsidiaries.
Pass the `log` parameter to concatenate it into the `print_file` function. |
|---|
| Источник | ⚠️ https://pan.baidu.com/s/1YW52iM0ehUfFKa_CiTHBjQ?from=init&pwd=kqec |
|---|
| Пользователь | alc9700 (UID 79368) |
|---|
| Представление | 03.02.2025 06:55 (2 лет назад) |
|---|
| Модерация | 15.02.2025 15:43 (12 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 295954 [NUUO Camera до 20250203 /handle_config.php print_file log эскалация привилегий] |
|---|
| Баллы | 20 |
|---|