automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -61145,6 +61145,71 @@
     "session_types": false,
     "needs_cleanup": null
   },
+  "exploit_linux/http/hikvision_cve_2021_36260_blind": {
+    "name": "Hikvision IP Camera Unauthenticated Command Injection",
+    "fullname": "exploit/linux/http/hikvision_cve_2021_36260_blind",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2021-09-18",
+    "type": "exploit",
+    "author": [
+      "Watchful_IP",
+      "bashis",
+      "jbaines-r7"
+    ],
+    "description": "This module exploits an unauthenticated command injection in a variety of Hikvision IP\n          cameras (CVE-2021-36260). The module inserts a command into an XML payload used with an\n          HTTP PUT request sent to the `/SDK/webLanguage` endpoint, resulting in command execution\n          as the `root` user.\n\n          This module specifically attempts to exploit the blind variant of the attack. The module\n          was successfully tested against an HWI-B120-D/W using firmware V5.5.101 build 200408. It\n          was also tested against an unaffected DS-2CD2142FWD-I using firmware V5.5.0 build 170725.\n          Please see the Hikvision advisory for a full list of affected products.",
+    "references": [
+      "CVE-2021-36260",
+      "URL-https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html",
+      "URL-https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/security-notification-command-injection-vulnerability-in-some-hikvision-products/",
+      "URL-https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py"
+    ],
+    "platform": "Linux,Unix",
+    "arch": "cmd, armle",
+    "rport": 80,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": [
+      "Unix Command",
+      "Linux Dropper"
+    ],
+    "mod_time": "2022-02-25 08:32:06 +0000",
+    "path": "/modules/exploits/linux/http/hikvision_cve_2021_36260_blind.rb",
+    "is_install_path": true,
+    "ref_name": "linux/http/hikvision_cve_2021_36260_blind",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ],
+      "SideEffects": [
+        "ioc-in-logs",
+        "artifacts-on-disk"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": true
+  },
   "exploit_linux/http/hp_system_management": {
     "name": "HP System Management Anonymous Access Code Execution",
     "fullname": "exploit/linux/http/hp_system_management",