An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21452
Reference (s):
- https://github.com/qq1654985095/tyq