Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37157. PoCs published by Todor Donev.
AI-analyzed exploit summary This Perl script exploits an information disclosure vulnerability in the DBPower C300 HD Camera by fetching a configuration backup file containing credentials. It sends a crafted HTTP request to retrieve a gzipped configuration file, then extracts and displays the username and password.
Description
DBPower C300 HD Camera contains a configuration disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive credentials through an unprotected configuration backup endpoint. Attackers can download the configuration file and extract hardcoded username and password by accessing the /tmpfs/config_backup.bin resource.
Exploits (1)
This Perl script exploits an information disclosure vulnerability in the DBPower C300 HD Camera by fetching a configuration backup file containing credentials. It sends a crafted HTTP request to retrieve a gzipped configuration file, then extracts and displays the username and password.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N