peter bassill · operator
$ cve CVE-2020-24217 JSON

CVE-2020-24217 EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 40.3% (pctl 99)

Patch early

A public exploit exists.

Description

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS40.3% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-306
On CISA KEVno
Public exploityes
Published2020-10-06
Last modified2026-06-17

Affected (40)

VendorProduct
szurayiptv\/h.264 video encoder firmware
szurayuaioe264-1u
szurayuce264-1-mini
szurayuce264-1wb-mini
szurayuce264-4-1u
szurayuce264-8-1u
szurayuhae264-16
szurayuhce264-1
szurayuhce264-16p32
szurayuhce264-1p2
szurayuhce264-1p2-1u
szurayuhce264-1s
szurayuhce264-1w
szurayuhce264-1ws
szurayuhce264-4p8
szurayuhe264-1-4k
szurayuhe264-16
szurayuhe264-16l-3u
szurayuhe264-16s-2u
szurayuhe264-1l
szurayuhe264-1l-4k
szurayuhe264-1lw
szurayuhe264-1s
szurayuhe264-1s-mini
szurayuhe264-1w-mini
szurayuhe264-1wb-4g
szurayuhe264-1wb-mini
szurayuhe264-1wbs-2b
szurayuhe264-1wbs-mini
szurayuhe264-1ws-mini
szurayuhe264-2-1u
szurayuhe264-4
szurayuhe264-4-1u
szurayuhe264-4l-1u
szurayuhe264-8
szurayuhe264-8-1u
szurayuhe264-8l-3u
szurayuhe264-8s-2u
szurayuse264-16-3u
szurayuse264-1l

Public exploits

SourceTitleDate
exploit-dbHiSilicon Video Encoders - RCE via unauthenticated command injection2020-10-19
exploit-dbHiSilicon video encoders - RCE via unauthenticated upload of malicious firmware2020-10-19

References

→ the Explorer  ·  watch your stack  ·  NVD