PT-2023-7592 · Dahua · Dahua Smart Parking Management

Rceraser · Publicado 2023-06-06 · Atualizado 2024-05-17 · CVE-2023-3121

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:N/A:C

Name of the Vulnerable Software and Affected Versions Dahua Smart Parking Management versions up to 20230528

Description The issue is related to insufficient checking of incoming requests in the /ipms/imageConvert/image file of the Dahua Smart Parking Management system. This can allow a remote attacker to perform a server-side request forgery (SSRF) attack by manipulating the fileUrl argument. The exploit has been publicly disclosed, and the vendor was contacted but did not respond.

Recommendations For versions up to 20230528, as a temporary workaround, consider restricting access to the /ipms/imageConvert/image file to minimize the risk of exploitation. Avoid using the fileUrl argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

BDU:2023-08652

CVE-2023-3121

Produtos afetados

Dahua Smart Parking Management

Referências · 8

• 🔥 https://github.com/RCEraser/cve/blob/main/DaHua..md · Exploit
• 🔥 https://github.com/RCERaser/cve/blob/main/DaHua..md · Exploit
• https://vuldb.com/?ctiid.230800 · Nota
• https://bdu.fstec.ru/vul/2023-08652 · Nota de Segurança
• https://vuldb.com/?id.230800 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-3121 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-3121 · Aviso do Fabricante
• https://t.me/cvenotify/51859 · Publicação no Telegram