Larry Cashdollar

تحتوي الأجهزة المتأثرة على ثغرة أمنية تتمثل في عدم التحييد السليم للعناصر الخاصة المستخدمة في أحد الأوامر (”حقن الأوامر“). وهذا يتيح إمكانية حقن الأوامر في نظام التشغيل عبر المكون `upload map.cgi`. تؤثر هذه المشكلة على عدة طرازات من كاميرات Vivotek، وقد تُستخدم كنقاط انطلاق لاختراق الشبكة بشكل أكبر. تسمح هذه الثغرة بتنفيذ التعليمات البرمجية عن بُعد.

The vulnerable software is AVTECH IP cameras, specifically the AVM1203 model. This flaw allows malicious actors to execute command injections remotely, granting them elevated privileges on the target system. The vulnerability is exploited through the brightness function of the camera, enabling remote code execution (RCE) without authentication. The vulnerable versions are those with expired support, specifically the ones from 2019 or earlier. Approximately 4,386,526 results were found on ZoomEye, indicating a large number of potentially vulnerable devices. An exploit for this vulnerability is available, and it has been used to spread the Mirai malware. The exploit allows attackers to inject and execute commands over the network without authentication, posing a massive risk to commercial, financial, and healthcare sectors. #AVTECH #AVM1203 #Mirai #Botnet #RCE #CyberSecurity #IoTSecurity #CVE20247029

An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models. If exploited, the vulnerability could allow authenticated users to execute commands via a network. The vulnerability exists due to the lack of measures to neutralize special elements. It is reported that the vulnerability has been exploited in the wild. Approximately 27,804 devices are potentially affected, mainly distributed in Japan, Mexico, and other countries.

An OS command injection vulnerability exists, allowing an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is related to the lack of measures to neutralize special elements used in the OS command. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands. New botnet malware has been found to exploit this flaw in routers.

The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a URL, specifically in the lib/thumbshooter.rb file of the Thumbshooter gem for Ruby.

The issue allows local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. This could potentially be exploited in configurations where htpasswd is used with sudo privileges or accessed remotely.