Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-24217 Details

Description

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to achieve arbitrary code execution.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html	CVE	ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html	CVE	ExploitThird Party AdvisoryVDB Entry
https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/	CVE	ExploitThird Party Advisory
https://www.kb.cert.org/vuls/id/896979	CVE	Third Party AdvisoryUS Government Resource
http://packetstormsecurity.com/files/159597/HiSilicon-Video-Encoder-Command-Injection.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/159599/HiSilicon-Video-Encoder-Malicious-Firmware-Code-Execution.html	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://kojenov.com/2020-09-15-hisilicon-encoder-vulnerabilities/	[email protected]	ExploitThird Party Advisory
https://www.kb.cert.org/vuls/id/896979	[email protected]	Third Party AdvisoryUS Government Resource

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-306	Missing Authentication for Critical Function	[email protected]

Affected Products

Product	Versions
szuray iptv/h.264 video encoder firmware	All versions
CPE cpe:2.3:o:szuray:iptv/h.264_video_encoder_firmware:-:::::::* Remediation No remediation found in references.
szuray uaioe264-1u	All versions
CPE cpe:2.3:h:szuray:uaioe264-1u:-:::::::* Remediation No remediation found in references.
szuray uce264-1-mini	All versions
CPE cpe:2.3:h:szuray:uce264-1-mini:-:::::::* Remediation No remediation found in references.
szuray uce264-1wb-mini	All versions
CPE cpe:2.3:h:szuray:uce264-1wb-mini:-:::::::* Remediation No remediation found in references.
szuray uce264-4-1u	All versions
CPE cpe:2.3:h:szuray:uce264-4-1u:-:::::::* Remediation No remediation found in references.
szuray uce264-8-1u	All versions
CPE cpe:2.3:h:szuray:uce264-8-1u:-:::::::* Remediation No remediation found in references.
szuray uhae264-16	All versions
CPE cpe:2.3:h:szuray:uhae264-16:-:::::::* Remediation No remediation found in references.
szuray uhce264-1	All versions
CPE cpe:2.3:h:szuray:uhce264-1:-:::::::* Remediation No remediation found in references.
szuray uhce264-16p32	All versions
CPE cpe:2.3:h:szuray:uhce264-16p32:-:::::::* Remediation No remediation found in references.
szuray uhce264-1p2	All versions
CPE cpe:2.3:h:szuray:uhce264-1p2:-:::::::* Remediation No remediation found in references.
szuray uhce264-1p2-1u	All versions
CPE cpe:2.3:h:szuray:uhce264-1p2-1u:-:::::::* Remediation No remediation found in references.
szuray uhce264-1s	All versions
CPE cpe:2.3:h:szuray:uhce264-1s:-:::::::* Remediation No remediation found in references.
szuray uhce264-1w	All versions
CPE cpe:2.3:h:szuray:uhce264-1w:-:::::::* Remediation No remediation found in references.
szuray uhce264-1ws	All versions
CPE cpe:2.3:h:szuray:uhce264-1ws:-:::::::* Remediation No remediation found in references.
szuray uhce264-4p8	All versions
CPE cpe:2.3:h:szuray:uhce264-4p8:-:::::::* Remediation No remediation found in references.
szuray uhe264-1-4k	All versions
CPE cpe:2.3:h:szuray:uhe264-1-4k:-:::::::* Remediation No remediation found in references.
szuray uhe264-16	All versions
CPE cpe:2.3:h:szuray:uhe264-16:-:::::::* Remediation No remediation found in references.
szuray uhe264-16l-3u	All versions
CPE cpe:2.3:h:szuray:uhe264-16l-3u:-:::::::* Remediation No remediation found in references.
szuray uhe264-16s-2u	All versions
CPE cpe:2.3:h:szuray:uhe264-16s-2u:-:::::::* Remediation No remediation found in references.
szuray uhe264-1l	All versions
CPE cpe:2.3:h:szuray:uhe264-1l:-:::::::* Remediation No remediation found in references.
szuray uhe264-1l-4k	All versions
CPE cpe:2.3:h:szuray:uhe264-1l-4k:-:::::::* Remediation No remediation found in references.
szuray uhe264-1lw	All versions
CPE cpe:2.3:h:szuray:uhe264-1lw:-:::::::* Remediation No remediation found in references.
szuray uhe264-1s	All versions
CPE cpe:2.3:h:szuray:uhe264-1s:-:::::::* Remediation No remediation found in references.
szuray uhe264-1s-mini	All versions
CPE cpe:2.3:h:szuray:uhe264-1s-mini:-:::::::* Remediation No remediation found in references.
szuray uhe264-1w-mini	All versions
CPE cpe:2.3:h:szuray:uhe264-1w-mini:-:::::::* Remediation No remediation found in references.
szuray uhe264-1wb-4g	All versions
CPE cpe:2.3:h:szuray:uhe264-1wb-4g:-:::::::* Remediation No remediation found in references.
szuray uhe264-1wb-mini	All versions
CPE cpe:2.3:h:szuray:uhe264-1wb-mini:-:::::::* Remediation No remediation found in references.
szuray uhe264-1wbs-2b	All versions
CPE cpe:2.3:h:szuray:uhe264-1wbs-2b:-:::::::* Remediation No remediation found in references.
szuray uhe264-1wbs-mini	All versions
CPE cpe:2.3:h:szuray:uhe264-1wbs-mini:-:::::::* Remediation No remediation found in references.
szuray uhe264-1ws-mini	All versions
CPE cpe:2.3:h:szuray:uhe264-1ws-mini:-:::::::* Remediation No remediation found in references.
szuray uhe264-2-1u	All versions
CPE cpe:2.3:h:szuray:uhe264-2-1u:-:::::::* Remediation No remediation found in references.
szuray uhe264-4	All versions
CPE cpe:2.3:h:szuray:uhe264-4:-:::::::* Remediation No remediation found in references.
szuray uhe264-4-1u	All versions
CPE cpe:2.3:h:szuray:uhe264-4-1u:-:::::::* Remediation No remediation found in references.
szuray uhe264-4l-1u	All versions
CPE cpe:2.3:h:szuray:uhe264-4l-1u:-:::::::* Remediation No remediation found in references.
szuray uhe264-8	All versions
CPE cpe:2.3:h:szuray:uhe264-8:-:::::::* Remediation No remediation found in references.
szuray uhe264-8-1u	All versions
CPE cpe:2.3:h:szuray:uhe264-8-1u:-:::::::* Remediation No remediation found in references.
szuray uhe264-8l-3u	All versions
CPE cpe:2.3:h:szuray:uhe264-8l-3u:-:::::::* Remediation No remediation found in references.
szuray uhe264-8s-2u	All versions
CPE cpe:2.3:h:szuray:uhe264-8s-2u:-:::::::* Remediation No remediation found in references.
szuray use264-16-3u	All versions
CPE cpe:2.3:h:szuray:use264-16-3u:-:::::::* Remediation No remediation found in references.
szuray use264-1l	All versions
CPE cpe:2.3:h:szuray:use264-1l:-:::::::* Remediation No remediation found in references.
szuray use264-1l-1u	All versions
CPE cpe:2.3:h:szuray:use264-1l-1u:-:::::::* Remediation No remediation found in references.
szuray use264-1l-mini	All versions
CPE cpe:2.3:h:szuray:use264-1l-mini:-:::::::* Remediation No remediation found in references.
szuray use264-1lw	All versions
CPE cpe:2.3:h:szuray:use264-1lw:-:::::::* Remediation No remediation found in references.
szuray use264-1wb-l	All versions
CPE cpe:2.3:h:szuray:use264-1wb-l:-:::::::* Remediation No remediation found in references.
szuray use264-4l-1u	All versions
CPE cpe:2.3:h:szuray:use264-4l-1u:-:::::::* Remediation No remediation found in references.
szuray use264-8-1u	All versions
CPE cpe:2.3:h:szuray:use264-8-1u:-:::::::* Remediation No remediation found in references.
szuray uve264-1l	All versions
CPE cpe:2.3:h:szuray:uve264-1l:-:::::::* Remediation No remediation found in references.
szuray uve264-1lw	All versions
CPE cpe:2.3:h:szuray:uve264-1lw:-:::::::* Remediation No remediation found in references.
szuray iptv/h.265 video encoder firmware	All versions
CPE cpe:2.3:o:szuray:iptv/h.265_video_encoder_firmware:-:::::::* Remediation No remediation found in references.
szuray uaioe265-1u	All versions
CPE cpe:2.3:h:szuray:uaioe265-1u:-:::::::* Remediation No remediation found in references.
szuray uhae265-1-mini	All versions
CPE cpe:2.3:h:szuray:uhae265-1-mini:-:::::::* Remediation No remediation found in references.
szuray uhae265-1wb-mini	All versions
CPE cpe:2.3:h:szuray:uhae265-1wb-mini:-:::::::* Remediation No remediation found in references.
szuray uhae265-4-1u	All versions
CPE cpe:2.3:h:szuray:uhae265-4-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-1	All versions
CPE cpe:2.3:h:szuray:uhe265-1:-:::::::* Remediation No remediation found in references.
szuray uhe265-1-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-1-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-1-4k	All versions
CPE cpe:2.3:h:szuray:uhe265-1-4k:-:::::::* Remediation No remediation found in references.
szuray uhe265-1-mini	All versions
CPE cpe:2.3:h:szuray:uhe265-1-mini:-:::::::* Remediation No remediation found in references.
szuray uhe265-16-3u	All versions
CPE cpe:2.3:h:szuray:uhe265-16-3u:-:::::::* Remediation No remediation found in references.
szuray uhe265-16l-3u	All versions
CPE cpe:2.3:h:szuray:uhe265-16l-3u:-:::::::* Remediation No remediation found in references.
szuray uhe265-1l	All versions
CPE cpe:2.3:h:szuray:uhe265-1l:-:::::::* Remediation No remediation found in references.
szuray uhe265-1lw	All versions
CPE cpe:2.3:h:szuray:uhe265-1lw:-:::::::* Remediation No remediation found in references.
szuray uhe265-1s-4k	All versions
CPE cpe:2.3:h:szuray:uhe265-1s-4k:-:::::::* Remediation No remediation found in references.
szuray uhe265-1s-mini	All versions
CPE cpe:2.3:h:szuray:uhe265-1s-mini:-:::::::* Remediation No remediation found in references.
szuray uhe265-1w	All versions
CPE cpe:2.3:h:szuray:uhe265-1w:-:::::::* Remediation No remediation found in references.
szuray uhe265-1w-4k	All versions
CPE cpe:2.3:h:szuray:uhe265-1w-4k:-:::::::* Remediation No remediation found in references.
szuray uhe265-1w-mini	All versions
CPE cpe:2.3:h:szuray:uhe265-1w-mini:-:::::::* Remediation No remediation found in references.
szuray uhe265-1wb-4g	All versions
CPE cpe:2.3:h:szuray:uhe265-1wb-4g:-:::::::* Remediation No remediation found in references.
szuray uhe265-1wb-mini	All versions
CPE cpe:2.3:h:szuray:uhe265-1wb-mini:-:::::::* Remediation No remediation found in references.
szuray uhe265-1wbs-mini	All versions
CPE cpe:2.3:h:szuray:uhe265-1wbs-mini:-:::::::* Remediation No remediation found in references.
szuray uhe265-2-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-2-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-4	All versions
CPE cpe:2.3:h:szuray:uhe265-4:-:::::::* Remediation No remediation found in references.
szuray uhe265-4-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-4-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-4s	All versions
CPE cpe:2.3:h:szuray:uhe265-4s:-:::::::* Remediation No remediation found in references.
szuray uhe265-4s-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-4s-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-8-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-8-1u:-:::::::* Remediation No remediation found in references.
szuray uhe265-8l-3u	All versions
CPE cpe:2.3:h:szuray:uhe265-8l-3u:-:::::::* Remediation No remediation found in references.
szuray uhe265-8s-1u	All versions
CPE cpe:2.3:h:szuray:uhe265-8s-1u:-:::::::* Remediation No remediation found in references.
szuray uhse265-1u	All versions
CPE cpe:2.3:h:szuray:uhse265-1u:-:::::::* Remediation No remediation found in references.
szuray use265-1-1u	All versions
CPE cpe:2.3:h:szuray:use265-1-1u:-:::::::* Remediation No remediation found in references.
szuray use265-1-mini	All versions
CPE cpe:2.3:h:szuray:use265-1-mini:-:::::::* Remediation No remediation found in references.
szuray use265-16l-3u	All versions
CPE cpe:2.3:h:szuray:use265-16l-3u:-:::::::* Remediation No remediation found in references.
szuray use265-1l	All versions
CPE cpe:2.3:h:szuray:use265-1l:-:::::::* Remediation No remediation found in references.
szuray use265-1l-1u	All versions
CPE cpe:2.3:h:szuray:use265-1l-1u:-:::::::* Remediation No remediation found in references.
szuray use265-1l-mini	All versions
CPE cpe:2.3:h:szuray:use265-1l-mini:-:::::::* Remediation No remediation found in references.
szuray use265-1lw	All versions
CPE cpe:2.3:h:szuray:use265-1lw:-:::::::* Remediation No remediation found in references.
szuray use265-1w-mini	All versions
CPE cpe:2.3:h:szuray:use265-1w-mini:-:::::::* Remediation No remediation found in references.
szuray use265-1wb-4g	All versions
CPE cpe:2.3:h:szuray:use265-1wb-4g:-:::::::* Remediation No remediation found in references.
szuray use265-1wb-l	All versions
CPE cpe:2.3:h:szuray:use265-1wb-l:-:::::::* Remediation No remediation found in references.
szuray use265-1wb-mini	All versions
CPE cpe:2.3:h:szuray:use265-1wb-mini:-:::::::* Remediation No remediation found in references.
szuray use265-2-1u	All versions
CPE cpe:2.3:h:szuray:use265-2-1u:-:::::::* Remediation No remediation found in references.
szuray use265-4-1u	All versions
CPE cpe:2.3:h:szuray:use265-4-1u:-:::::::* Remediation No remediation found in references.
szuray use265-4l-1u	All versions
CPE cpe:2.3:h:szuray:use265-4l-1u:-:::::::* Remediation No remediation found in references.
szuray use265-8-1u	All versions
CPE cpe:2.3:h:szuray:use265-8-1u:-:::::::* Remediation No remediation found in references.
szuray uve265-1	All versions
CPE cpe:2.3:h:szuray:uve265-1:-:::::::* Remediation No remediation found in references.
szuray uve265-1w	All versions
CPE cpe:2.3:h:szuray:uve265-1w:-:::::::* Remediation No remediation found in references.
jtechdigital h.264 iptv encoder 1080p@60hz firmware	All versions
CPE cpe:2.3:o:jtechdigital:h.264_iptv_encoder_1080p@60hz_firmware:-:::::::* Remediation No remediation found in references.
jtechdigital h.264 iptv encoder 1080p@60hz	All versions
CPE cpe:2.3:h:jtechdigital:h.264_iptv_encoder_1080p@60hz:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-h264 firmware	All versions
CPE cpe:2.3:o:provideoinstruments:vecaster-hd-h264_firmware:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-h264	All versions
CPE cpe:2.3:h:provideoinstruments:vecaster-hd-h264:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-hevc firmware	All versions
CPE cpe:2.3:o:provideoinstruments:vecaster-hd-hevc_firmware:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-hevc	All versions
CPE cpe:2.3:h:provideoinstruments:vecaster-hd-hevc:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-4k-hevc firmware	All versions
CPE cpe:2.3:o:provideoinstruments:vecaster-4k-hevc_firmware:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-4k-hevc	All versions
CPE cpe:2.3:h:provideoinstruments:vecaster-4k-hevc:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-sdi firmware	All versions
CPE cpe:2.3:o:provideoinstruments:vecaster-hd-sdi_firmware:-:::::::* Remediation No remediation found in references.
provideoinstruments vecaster-hd-sdi	All versions
CPE cpe:2.3:h:provideoinstruments:vecaster-hd-sdi:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jan 1, 2022	Modified Analysis	[email protected]
Oct 19, 2020	CVE Modified	[email protected]
Oct 19, 2020	Initial Analysis	[email protected]

CVE-2020-24217 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation