Vulnerability · Published Dec 17, 2023 · Assigned by VulDB
CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injection
Medium 6.3
In plain English
A medium-severity OS command injection in Intercom Broadcasting System from Hikvision. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 89.0% (higher than 99.8% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Official description
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hikvision | Intercom Broadcasting System | 3.0.3_20201113_RELEASE(HIK) |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://vuldb.com/?id.248254 vdb-entry, technical-description
- https://vuldb.com/?ctiid.248254 signature, permissions-required
- https://github.com/willchen0011/cve/blob/main/rce.md exploit