IPTV encoder devices contain multiple vulnerabilities

guest · Sep 15, 2020

IPTV encoder devices contain multiple vulnerabilities
Vulnerability Note VU#896979
September 15, 2020
https://kb.cert.org/vuls/id/896979

Overview
Multiple vulnerabilities exist in various Video Over IP (Internet Protocol) encoder devices, also known as IPTV/H.264/H.265 video encoders. These vulnerabilities allow an unauthenticated remote attacker to execute arbitrary code and perform other unauthorized actions on a vulnerable system.
Description
IPTV/H.264/H.265 video encoder devices provide video streaming capability over IP networks. The underlying software in these devices seem to share common components that have multiple weaknesses in their design and default configuration.

The vulnerabilities occur primarily in the network services such as web and telnet interfaces. These vulnerabilities stem from software bugs, such as insufficient validation of user input and the use of insecure credentials through hard-coded passwords
Click to expand...

Further details of these vulnerabilities can be found in this blog post by Alexei Kojenov.
Solution
Apply Updates
Contact your vendor. See also the Vendor Information section below.
Restrict network access
Restrict network access of these devices to a well protect local area network (LAN) or through a firewall. Allowing direct Internet access to these devices increases the risk of compromise and potential abuse from an unauthorized remote attacker.
Click to expand...

ronjor · Sep 17, 2020

IPTV encoder devices contain multiple vulnerabilities

Vulnerability Note VU#896979
Original Release Date: 2020-09-15 | Last Revised: 2020-09-17
Overview
Multiple vulnerabilities exist in various Video Over IP (Internet Protocol) encoder devices, also known as IPTV/H.264/H.265 video encoders. These vulnerabilities allow an unauthenticated remote attacker to execute arbitrary code and perform other unauthorized actions on a vulnerable system.
Click to expand...

Log in or Sign up

IPTV encoder devices contain multiple vulnerabilities

guest Guest

ronjor Global Moderator

Log in or Sign up

IPTV encoder devices contain multiple vulnerabilities

guest Guest

ronjor Global Moderator

Useful Searches