CVEs-PoC/2015/CVE-2015-8286.md

CVE-2015-8286

Description

Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.

POC

Reference

• http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html
• http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html
• http://seclists.org/bugtraq/2015/Jun/117
• http://seclists.org/bugtraq/2015/Jun/117
• http://www.kb.cert.org/vuls/id/899080
• http://www.kb.cert.org/vuls/id/899080

Github

• https://github.com/ARPSyndicate/cvemon