CVE-2022-25012
MEDIUMArgus Surveillance DVR 4.0 - Inadequate Encryption Strength
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2022-25012. PoCs published by Salman Asad, s3l33, Pocland-db.
AI-analyzed exploit summary This exploit demonstrates weak password encryption in Argus Surveillance DVR 4.0 by reversing a hardcoded hash to its plaintext characters using a predefined mapping. It does not execute malicious actions but reveals the vulnerability in password storage.
Description
Argus Surveillance DVR v4.0 employs weak password encryption.
Exploits (5)
This exploit demonstrates weak password encryption in Argus Surveillance DVR 4.0 by reversing a hardcoded hash to its plaintext characters using a predefined mapping. It does not execute malicious actions but reveals the vulnerability in password storage.
This PoC decodes weakly encrypted passwords from Argus Surveillance DVR 4.0 by reversing a custom encoding scheme. It accepts a password hash as input and outputs the decoded password.
This repository contains a functional proof-of-concept tool that decodes weakly encrypted passwords in Argus Surveillance DVR v4.0 by reversing a static mapping table. The tool takes a hashed password as input and outputs the plaintext equivalent.
This PoC demonstrates weak password encryption in Argus Surveillance DVR v4.0 by decoding hashed passwords using a predefined mapping table. It takes a hash string as input and outputs the corresponding plaintext password.
This PoC demonstrates weak password encryption in Argus Surveillance DVR 4.0 by decoding a hardcoded password hash using a predefined character mapping. It reveals the plaintext password from the encoded hash.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N