Description
Smartliving SmartLAN/G/SI <=6.x contains an unauthenticated server-side request forgery vulnerability in the GetImage functionality through the 'host' parameter. Attackers can exploit the onvif.cgi endpoint by specifying external domains to bypass firewalls and perform network enumeration through arbitrary HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| INIM Electronics s.r.l. | Smartliving SmartLAN/G/SI | <=6.0, 505, 515, 1050, 1050/G3, 10100L, 10100L/G3 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Exploit Database Entry 47764 exploit
- Packet Storm Security Exploit File exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry
- INIM Vendor Homepage product