PT-2022-11421 · Xiongmai · Xiaongmai Ahb7804R-Els+4

Published 2022-06-30 · Updated 2023-08-08 · CVE-2021-41506

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xiaongmai AHB7008T-MH-V2 Xiaongmai AHB7804R-ELS Xiaongmai AHB7804R-MH-V2 Xiaongmai AHB7808R-MS-V2 Xiaongmai AHB7808R-MS Xiaongmai AHB7808T-MS-V2 Xiaongmai AHB7804R-LMS HI3518 50H10L S39 version V4.02.R11.7601.Nat.Onvif.20170420 HI3518 50H10L S39 version V4.02.R11.Nat.Onvif.20160422 HI3518 50H10L S39 version V4.02.R11.7601.Nat.Onvif.20170424 HI3518 50H10L S39 version V4.02.R11.Nat.Onvif.20170327 HI3518 50H10L S39 version V4.02.R11.Nat.Onvif.20161205 HI3518 50H10L S39 version V4.02.R11.Nat.20170301 HI3518 50H10L S39 version V4.02.R12.Nat.OnvifS.20170727

Description The issue is related to a backdoor in the macGuarder and dvrHelper binaries of DVR/NVR/IP camera firmware due to static root account credentials in the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-41506

Affected Products

Xiaongmai Ahb7008T-Mh-V2

Xiaongmai Ahb7804R-Els

Xiaongmai Ahb7804R-Mh-V2

Xiaongmai Ahb7808R-Ms

Xiaongmai Ahb7808R-Ms-V2

References · 7

• 🔥 https://habr.com/en/post/486856 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41506 · Security Note
• https://xiongmaitech.com/en/index.php/news/info/12/68 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41506 · Vendor Advisory
• https://github.com/Snawoot/hisilicon-dvr-telnet · Note
• https://github.com/tothi/hs-dvr-telnet · Note
• https://t.me/cibsecurity/45409 · Telegram Post