Detections
Analytics
CVE-2018-9995
critical
Description
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
References
https://www.infosecurity-magazine.com/news/webcams-vulnerable-hiatusrat-fbi/
https://thehackernews.com/2024/12/cisa-and-fbi-raise-alerts-on-exploited.html
https://github.com/F7P-H4NN1B4L/CVE-2018-9995-DVR-Credentials-Extractor
https://github.com/jameseyes/DVRC
https://github.com/its-anya/DVR_Credential_Scanner
https://github.com/PuddinCat/GithubRepoSpider
https://github.com/A-Alabdoo/CVE-DVr
https://github.com/X3RX3SSec/DVR_Sploit
https://github.com/Pab450/CVE-2018-9995
https://github.com/ST0PL/DVRFaultNET
https://github.com/Saeed22487/CVE-2018-9995
https://github.com/awesome-consumer-iot/HTC
https://github.com/yatcode/HTC
https://github.com/withmasday/HTC
https://github.com/trustsect/HTC
https://github.com/Cyb0r9/DVR-Exploiter
https://github.com/zzh217/CVE-2018-9995_Batch_scanning_exp
https://github.com/ezelf/CVE-2018-9995_dvr_credentials
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-21587
http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.html
http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.html