Recent content by SEdawg

Thanks bashis. I tried with --reboot on the correct port (80) and it reported not vulnerable. I can sleep soundly again....hopefully for awhile.

Ah, so I guess checking against port 80 was indeed what I should have done. Running all checks against 80 return remote is not exploitable (Code 200), save the simple reboot command. I'm thinking/hoping I'm safe, at this point. Thank you for all your assistance!

Not dumb at all, I miss the crucial little details all the time. I'm on the same range, I can ping other devices and the cameras do respond to the pings. I haven't changed any ports that I can recall, the GUI lists ports as: HTTP: 80 RTSP: 554 HTTPS: 443 Server Port: 8000 Enhanced SDK: 8443 The...

Thank you for the quick comments Alastair, especially the link to the PoC github. I downloaded the py code and ran all the tests against the cameras (pinging each first to be sure they were responding). All commands failed with "Cannot establish connection to 192.168.1.64" except...

Excuse the long rant; it's definitely on-topic and should be useful to someone. I have a few OEM Hikvision cameras, model NP104-IR/4X, (equivalent to DS-2DE2A404IW-DE3), running on my home network since 2018. I happened upon the advisory of the latest Hikvision exploit/vulnerability last Friday...