信息來源:國(guó)家互聯(lián)網(wǎng)應(yīng)急中心
近期,國(guó)家信息安全漏洞共享平臺(tái)(CNVD)收錄了海康威視與大華股份網(wǎng)絡(luò)攝像機(jī)存在身份認(rèn)證繞過漏洞、配置文件密碼泄露等漏洞(CNVD-2017-06977、CNVD-2017-08191、CNVD-2017-08192、CNVD-2017-06997)。綜合利用上述漏洞,遠(yuǎn)程攻擊者可利用漏洞提升權(quán)限或加密其他用戶身份獲取敏感信息,并控制網(wǎng)絡(luò)設(shè)備。由于漏洞利用較為簡(jiǎn)單,有可能被黑客組織利用于傳播網(wǎng)絡(luò)病毒(如:蠕蟲)。
一、漏洞情況分析
Hikvision Cameras、Hikvision DS-2CD2xx2F-I 等系列為海康威視(Hikvision)公司(股票代碼:SZ.002415)的網(wǎng)絡(luò)攝像機(jī)產(chǎn)品;大華DH-IPC-HDBW23A0RN-ZS等系列設(shè)備為大華(DaHua)公司(股票代碼:SZ.002236)的網(wǎng)絡(luò)攝像機(jī)產(chǎn)品。多款網(wǎng)絡(luò)攝像機(jī)產(chǎn)品存在類似身份認(rèn)證不當(dāng)漏洞與配置文件密碼泄露漏洞,遠(yuǎn)程攻擊者可利用漏洞提升權(quán)限或加密其他用戶身份獲取敏感信息,并控制網(wǎng)絡(luò)設(shè)備。
詳情如下:
漏洞編號(hào)
|
漏洞描述
|
主要影響產(chǎn)品
|
CNVD-2017-06977、CVE-2017-7921
|
??低暥鄠€(gè)網(wǎng)絡(luò)攝像機(jī)產(chǎn)品存在身份認(rèn)證不當(dāng)漏洞,應(yīng)用程序沒有充分或正確地驗(yàn)證用戶,則會(huì)出現(xiàn)不正確的身份驗(yàn)證漏洞??赡軙?huì)允許攻擊者在系統(tǒng)上升級(jí)其權(quán)限,并獲取敏感信息。
|
Hikvision Digital Technology DS-2DFx Series 5.4.5 Build 160928
Hikvision Digital Technology DS-2DFx Series 5.2 build 140805
Hikvision Digital Technology DS-2CD63xx Series 5.3.5 Build 160106
Hikvision Digital Technology DS-2CD63xx Series 5.0.9 build 140305
Hikvision Digital Technology DS-2CD4xx5 Series 5.4 Build 160421
Hikvision Digital Technology DS-2CD4xx5 Series 5.2 build 140721
Hikvision Digital Technology DS-2CD4x2xFWD Series 5.4 Build 160414
Hikvision Digital Technology DS-2CD4x2xFWD Series 5.2 build 140721
Hikvision Digital Technology DS-2CD2xx2FWD Series 5.4.4 Build 161125
Hikvision Digital Technology DS-2CD2xx2FWD Series 5.3.1 build 150410
Hikvision Digital Technology DS-2CD2xx2F-I Series 5.4 build 160530
Hikvision Digital Technology DS-2CD2xx2F-I Series 5.2 build 140721
Hikvision Digital Technology DS-2CD2xx0F-I Series 5.4 Build 160401
Hikvision Digital Technology DS-2CD2xx0F-I Series 5.2 build 140721
|
CNVD-2017-08191、CVE-2017-7923
|
??低暥嗫顢z像機(jī)被發(fā)現(xiàn)密碼直接保存在配置文件中,攻擊者可以利用該漏洞導(dǎo)致用戶可提升權(quán)限或假冒另一用戶的身份,從而訪問敏感信息。
|
DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 Build 160530
DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401
DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125
DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414
DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421
DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928
DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106
|
CNVD-2017-08192、CVE-2017-7925
|
大華(Dahua)多款數(shù)字錄像機(jī)和IP攝像機(jī)被發(fā)現(xiàn)密碼直接保存在配置文件中,攻擊者可利用該漏洞假冒特權(quán)用戶的身份并獲得對(duì)敏感信息的訪問權(quán)。
|
DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and DHI-HCVR58A32S-S2
|
CNVD-2017-06997、CVE-2017-7927
|
大華(Dahua)的多款網(wǎng)絡(luò)攝像機(jī)存在身份驗(yàn)證漏洞。設(shè)備使用用戶密碼hash值替代密碼本身來驗(yàn)證身份,這可能允許攻擊者不獲得實(shí)際密碼的情況下繞過身份驗(yàn)證,獲得設(shè)備權(quán)限。
|
Dahuasecurity DHI-HCVR58A32S-S2 0
Dahuasecurity DHI-HCVR51A08HE-S3 0
Dahuasecurity DHI-HCVR51A04HE-S3 0
Dahuasecurity DH-SD6CXX 0
Dahuasecurity DH-NVR1XXX 0
Dahuasecurity DH-IPC-HFW4XXX 0
Dahuasecurity DH-IPC-HFW2XXX 0
Dahuasecurity DH-IPC-HFW1XXX 0
Dahuasecurity DH-IPC-HDW4XXX 0
Dahuasecurity DH-IPC-HDW2XXX 0
Dahuasecurity DH-IPC-HDW1XXX 0
Dahuasecurity DH-IPC-HDBW23A0RN-ZS 0
Dahuasecurity DH-IPC-HDBW13A0SN 0
Dahuasecurity DH-HCVR5XXX 0
Dahuasecurity DH-HCVR4XXX 0
|
CNVD對(duì)上述漏洞綜合評(píng)級(jí)為“高危”。
二、防護(hù)建議
目前,海康威視公司和大華公司已及時(shí)給出了上述漏洞的安全解決方案,請(qǐng)?jiān)L問廠商主頁(yè)及時(shí)修復(fù)漏洞:
http://www.hikvision.com/us/about_10805.html
http://www.hikvision.com/us/about_10807.html
http://us.dahuasecurity.com/en/us/Security-Bulletin_030617.php
http://us.dahuasecurity.com/en/us/Security-Bulletin_04032017.php
若未能及時(shí)升級(jí),建議可以通過臨時(shí)關(guān)閉網(wǎng)絡(luò)攝像機(jī)產(chǎn)品的遠(yuǎn)程管理界面或認(rèn)證端口來防范網(wǎng)絡(luò)攻擊。
附:參考鏈接:
http://www.securityfocus.com/bid/98312
http://www.securityfocus.com/bid/98313
https://nvd.nist.gov/vuln/detail/CVE-2017-7921
https://nvd.nist.gov/vuln/detail/CVE-2017-7923
https://nvd.nist.gov/vuln/detail/CVE-2017-7925
https://nvd.nist.gov/vuln/detail/CVE-2017-7927
http://www.cnvd.org.cn/flaw/show/CNVD-2017-06977
http://www.cnvd.org.cn/flaw/show/CNVD-2017-08191
http://www.cnvd.org.cn/flaw/show/CNVD-2017-08192
http://www.cnvd.org.cn/flaw/show/CNVD-2017-08191