An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system (Camera, Decoder and Encoder) and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
hitachi hc-ip9100hd_firmware |
Vulmon