Yunni Technology iLnkP2P°²È«·ì϶°²È«¹«¸æ

°ä²¼¹¦·ò 2019-05-05

·ì϶±àºÅºÍ¼¶±ð


CVE±àºÅ£ºCVE-2019-11220 £¬Î£ÏÕ¼¶±ð£º¸ß¼¶ £¬CVSS·ÖÖµ£º8.1

CVE±àºÅ£ºCVE-2019-11219 £¬Î£ÏÕ¼¶±ð£º¸ß¼¶ £¬CVSS·ÖÖµ£º8.2 


Ó°Ïì°æ±¾¼°²úÆ·


iLnkP2P


·ì϶¸ÅÊö


Yunni Technology iLnkP2PÊÇÖйúÔÆÄ޿Ƽ¼£¨Yunni Technology£©¹«Ë¾µÄÒ»Ì×Ö§³ÖÖ±½Óµã¶Ôµã½Ó¼ûÉ豸µÄÈí¼þ¡£ºÜ¶àÖÇÄÜÉ豸¶¼Ê¹ÓÃÏֳɵÄ×é¼þ £¬ÆäÖÐһЩ×é¼þÓÃÓÚÈ·±£É豸֮¼äÎÞ×è°­µÄP2PͨѶ £¬iLnkP2P¾ÍÊÇÒ»ÖÖÏֳɵĽâ¾ö¹æ»®¡£


Êý°Ù¸öÆ·ÅÆµÄ°²È«ÉãÏñÍ· £¬Ó¤¶ù¼à¶½Æ÷ºÍ¡°ÖÇÄÜ¡±ÃÅÁå¶¼´æÔÚÑϳÁµÄ·ì϶ £¬ºÚ¿ÍÄܹ»½Ù³ÖÉ豸²¢¼à¶½ËûÃǵÄÖ÷ÈË¡£


»¥ÁªÍøÉÏÒÑ·¢ÏÖ³¬¹ý200Íò¸öÒ×Êܹ¥»÷µÄÉ豸 £¬Ô̺¬ÓÉHiChip £¬TENVIS £¬SV3C £¬VStarcam £¬Wanscam £¬NEO Coolcam £¬Sricam £¬Eye SightºÍHVCAM·Ö·¢µÄÉ豸¡£ÊÜÓ°ÏìµÄÉ豸ʹÓÃÃûΪiLnkP2PµÄ×é¼þ¡£²»ÐÒµÄÊÇ £¬iLnkP2PÒ²±»Êý°Ù¸öÆäËûÆ·ÅÆÊ¹Óà £¬Òò¶øÄÑÒÔ¼ø±ðÒ×Êܹ¥»÷µÄÉ豸¡£

×êÑÐÈËÔ±·¢ÏÖiLnkP2PÖдæÔÚÁ½¸ö°²È«·ì϶£º


CVE-2019-11219

ÊÇÖ¸iLnkP2PÖеÄö¾Ù·ì϶ £¬ËüÔÊÐí¹¥»÷Õß¼±¾ç·¢´Ë¿ÌÏßÉ豸¡£ÓÉÓÚP2PµÄÐÔÖÊ £¬¹¥»÷ÕßÄܹ»ÔÚÈÆ¹ý·À»ðǽÏ޶ȵÄͬʱֱ½ÓÏνӵ½ËÁÒâÉ豸¡£


CVE-2019-11220

ÊÇÖ¸iLnkP2PÖеÄÒ»¸öÉí·ÝÑéÖ¤·ì϶ £¬ÔÊÐí¹¥»÷ÕßÀ¹½ØÓëÉ豸µÄÏνӲ¢Ö´ÐÐÖÐÑëÈ˹¥»÷¡£¹¥»÷Õß¿ÉÄÜÀûÓô˷ì϶½«ÃÜÂëÇÔÈ¡µ½É豸²¢¶ÔÆä½øÐнÚÔì¡£


Ò×Êܹ¥»÷µÄÉ豸½«ÓµÓгÆÎªUIDµÄÌØÊâÐòÁкÅ £¬¸ÃÐòÁкÅͨ³£Ó¡ÔÚÉ豸ÉÏij´¦µÄ±êÇ©ÉÏ¡£UID½«ÈçÏÂËùʾ£ºFFFF-123456-ABCDE¡£Ò×Êܹ¥»÷µÄHiChipÉ豸ÉϵÄUID±êÇ©£¨'FFFF'ǰ׺£©ÈçÏÂͼ£º


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


FFFFÊÇÉ豸µÄǰ׺¡£ÒÑÖªÓµÓÐÒÔÏÂǰ׺µÄÉ豸Ò×Êܹ¥»÷£º


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾



·ì϶ÑéÖ¤


ÔÝÎÞPOC/EXP¡£


½¨¸´½¨Òé


Ŀǰ¹©¸øÉÌûÓн¨¸´²¹¶¡¡ £»º½â´ëÊ©£º
1. ͨ¹ý×èÖ¹µ½UDP¶Ë¿Ú32100µÄ³öÕ¾Á÷Á¿À´ÓÐЧµØÖжÏP2PÖ°ÄÜ¡£Õ⽫×èֹͨ¹ýP2
P´Ó±í²¿ÍøÂç½Ó¼ûÉ豸 £¬±¾µØ½Ó¼ûÒÀÈ»ÓÐЧ¡£

2. ´ÓŵÑÔÓÅÁ¼µÄ¹©¸øÉÌ´¦²É°ìÐÂÉ豸¡£


²Î¿¼Á´½Ó


https://hacked.camera/