cbcvebase.
CVE-2018-5724
published 2018-01-16

CVE-2018-5724: MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.

PriorityP272critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
11.54%
95.5th percentile
MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.

Affected

1 ranges
VendorProductVersion rangeFixed in
barnimaster_ip_camera01_firmware——

Detection & IOCsextracted from sources · hover to see the quote

urlhttp://192.168.1.15/web/cgi-bin/hi3510/backup.cgi↗
path/web/cgi-bin/hi3510/backup.cgi↗
path/web/cgi-bin/hi3510/param.cgi↗
pathrestore.cgi↗
commandhttp://192.168.1.15/web/cgi-bin/hi3510/param.cgi?cmd=getuser↗
commandhttp://192.168.1.15/web/cgi-bin/hi3510/param.cgi?cmd=sethttpport&-httport=8080↗
  • →Monitor for unauthenticated HTTP GET requests to /web/cgi-bin/hi3510/backup.cgi or restore.cgi, which allow configuration download/upload without any credentials. ↗
  • →Detect unauthenticated requests to /web/cgi-bin/hi3510/param.cgi with sensitive query parameters such as cmd=getuser or cmd=sethttpport, indicating exploitation of CVE-2018-5724/5725/5726. ↗
  • →Alert on telnet login attempts using the hardcoded credential root:cat1029 against Master IP CAM 01 devices (related CVE-2018-5723, same device/firmware). ↗
  • ·The exploit uses a private/LAN IP (192.168.1.15) as the target; in real deployments the device IP will differ. Detection rules should match on the URI path patterns rather than the IP address. ↗
  • ·Vulnerability is confirmed only on firmware version 3.3.4.2103 of MASTER IPCAMERA01; other versions are not referenced in the sources. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.