PT-2026-24763
CVE-2019-25465
·
Publicado
2026-03-11
·
Atualizado
2026-03-11
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Hisilicon HiIpcam version V100R003
Description
The software contains a directory traversal flaw that allows unauthenticated attackers to access sensitive configuration files. This is achieved by exploiting directory listing within the
cgi-bin directory. Attackers can request the ''getadslattr.cgi'' endpoint to retrieve ADSL credentials and network configuration parameters, including usernames, passwords, and DNS settings.Recommendations
Apply a fix for Hisilicon HiIpcam version V100R003.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾