本报告由CNCERT物联网安全研究团队与360网络安全研究院共同发布
一、背景介绍
二、漏洞分析
1、信息泄露漏洞
2、命令注入漏洞
三、受影响设备固件列表
DCS-2530L_A1_FW_V1.03.01DCS-2530L_A1_FW_V1.04.01DCS-2530L_Ax_FW_V1.04.01DCS-2530L_REVA_FIRMWARE_1.03.01DCS-2530L_REVA_FIRMWARE_v1.03.01DCS-2530L_REVA_FIRMWARE_v1.04.01DCS-2530L_REVA_FIRMWARE_v1.05.05DCS-2530L_fw_revA1_1-03-01_eu_multi_20171108DCS-2530L_fw_revAx_1-04-01_eu_multi_20180601DCS-2670L_A1_FW_V2.01.031030103739DCS-2670L_FIRMWARE_2.01.10DCS-2670L_FW_v1.10.02DCS-2670L_fw_revA1_1-10-02_eu_multi_20171108DCS-2670L_fw_revA1_2-01-03_eu_multiDCS-2670L_fw_revB1_2-01_eu_multi_20190710DCS-4603_A1_FW_V1.03.04DCS-4603_FW_V1.02.02DCS-4603_REVA_FIRMWARE_1.02DCS-4603_REVA_FIRMWARE_v1.02.02DCS-4603_REVA_FIRMWARE_v1.03.04DCS-4603_fw_revA1_1-02-02_eu_multi_20171103DCS-4603_fw_revA1_1-03-04_eu_multi_20190422DCS-4622_B1_FW_V2.00.04DCS-4622_REVB_FIRMWARE_v2.00.04DCS-4622_fw_revB1_2-00-04_eu_multi_20181109DCS-4701E_B1_FW_V2.00.21_DCS-4701E_VB1_FIRMWARE_v2.00.21DCS-4703E_FW_V1.01.00DCS-4703E_FW_V1.02.03DCS-4703E_REVA_FIRMWARE_1.01DCS-4703E_REVA_FIRMWARE_v1.01DCS-4703E_REVA_FIRMWARE_v1.02.03DCS-4703E_fw_revA1_1-01_eu_multi_20170929DCS-4703E_fw_revA1_1-02-03_eu_multi_20190426DCS-4705E_A1_FW_v1.00.12DCS-4705E_A1_FW_v1.01.00DCS-4705E_REVA_FIRMWARE_v1.00.12DCS-4705E_REVA_FIRMWARE_v1.01.00DCS-4705E_fw_revA1_1-00-12_eu_multi_20181205DCS-4705E_fw_revA1_1-01-00_eu_multi_20190905DCS-4802E_B1_FW_V2.00.09DCS-4802E_REVB_FIRMWARE_v2.00.09DCS-4802E_fw_revB1_2-00-09_eu_multi_20190422DCS-P703_A1_FW_V1.01.00
四、处置建议
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论