Improper Authentication Vulnerability in Hitachi Kokusai Electric Network Monitoring Products

CVE-2022-37680

Summary

An improper authentication issue in Hitachi Kokusai Electric Network products enables attackers to exploit critical functions. By sending specially crafted POST requests to the /ptipupgrade.cgi endpoint, malicious actors can remotely reboot affected devices, causing potential disruptions in monitoring and operations. Affected products include various models of cameras, decoders, and encoders used in surveillance systems. Security update provided in the advisory 'hitachi-sec-2022-001' addresses this vulnerability.

References