peter bassill · operator
$ cve CVE-2020-24215 JSON

CVE-2020-24215 EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 19.8% (pctl 97)

Patch early

A public exploit exists.

Description

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration (with the cleartext admin password), and uploading a custom firmware update, to ultimately achieve arbitrary code execution.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS19.76% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-798
On CISA KEVno
Public exploityes
Published2020-10-06
Last modified2026-06-17

Affected (40)

VendorProduct
szurayiptv\/h.264 video encoder firmware
szurayuaioe264-1u
szurayuce264-1-mini
szurayuce264-1wb-mini
szurayuce264-4-1u
szurayuce264-8-1u
szurayuhae264-16
szurayuhce264-1
szurayuhce264-16p32
szurayuhce264-1p2
szurayuhce264-1p2-1u
szurayuhce264-1s
szurayuhce264-1w
szurayuhce264-1ws
szurayuhce264-4p8
szurayuhe264-1-4k
szurayuhe264-16
szurayuhe264-16l-3u
szurayuhe264-16s-2u
szurayuhe264-1l
szurayuhe264-1l-4k
szurayuhe264-1lw
szurayuhe264-1s
szurayuhe264-1s-mini
szurayuhe264-1w-mini
szurayuhe264-1wb-4g
szurayuhe264-1wb-mini
szurayuhe264-1wbs-2b
szurayuhe264-1wbs-mini
szurayuhe264-1ws-mini
szurayuhe264-2-1u
szurayuhe264-4
szurayuhe264-4-1u
szurayuhe264-4l-1u
szurayuhe264-8
szurayuhe264-8-1u
szurayuhe264-8l-3u
szurayuhe264-8s-2u
szurayuse264-16-3u
szurayuse264-1l

Public exploits

SourceTitleDate
exploit-dbHiSilicon Video Encoders - Full admin access via backdoor password2020-10-19

References

→ the Explorer  ·  watch your stack  ·  NVD