The vulnerable software is AVTECH IP cameras, specifically the AVM1203 model. This flaw allows malicious actors to execute command injections remotely, granting them elevated privileges on the target system. The vulnerability is exploited through the brightness function of the camera, enabling remote code execution (RCE) without authentication.
The vulnerable versions are those with expired support, specifically the ones from 2019 or earlier. Approximately 4,386,526 results were found on ZoomEye, indicating a large number of potentially vulnerable devices.
An exploit for this vulnerability is available, and it has been used to spread the Mirai malware. The exploit allows attackers to inject and execute commands over the network without authentication, posing a massive risk to commercial, financial, and healthcare sectors.
#AVTECH #AVM1203 #Mirai #Botnet #RCE #CyberSecurity #IoTSecurity #CVE20247029