HiSilicon-Jovision clone cam_JVS-HI3516CS-DE-7601

[Cristian Alberti]

Hi all.

I have a Jovision clone cam based on 3516C SoC + OV2710.
I'd like to telnet with it but the service doesn't run at all (no 23 port, according to nmap scan).
I've started a cgi query from a browser and I've found:

http://x.x.x.x/cgi-bin/jvsweb.cgi?cmd=webhelp

cmd list and help information

(....)
telnetd telnetd start
(....)

Should be the daemon.
I've tried something like the url above, with some cmd/action combo but nothing happens (according to Putty check).

What can I do to enable it?

Tnx in advance for any help

 

[VorlonFrog]

http://x.x.x.x/cgi-bin/jvsweb.cgi?cmd="telnetd start"

 

[Cristian Alberti]

Tnx Vorlon but I've already tried this and similar combo (with action=start) with no luck.

 

[VorlonFrog]

How about dropping the quotes and the 'start' argument, and only sending

http://x.x.x.x/cgi-bin/jvsweb.cgi?cmd=telnetd

 

[Cristian Alberti]

Nothing: shows up "unknown error happened"
Without quotes shows "Bad param"

 

[Cristian Alberti]

Something strange (to me).
Putting this
http://192.168.1.9/cgi-bin/jvsweb.cgi?cmd="22/usr/libexec/telnetd"

I obtain the usual blank screen but without error msg like before; instead I have

22

If I use the same link with other combo like quotes/double quotes/no quotes, with/without space, I have error msgs.

But, using Putty with telnet (normal or SSH with the same 22 port), I cannot enter, due a server refuse.

I keep trying

EDIT:
False alarm. The real link is this:
192.168.1.9/cgi-bin/jvsweb.cgi?cmd=%2222

he doesn't recognize what written after

 

[Cristian Alberti]

I'm googling around but I don't find any jvsweb.cgi syntax
There are other cgi commands but not this type.