ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution
Posted on 27 February 2023
ABUS Security Camera version TVIP 20000-21150 suffers from local file inclusion, hardcoded credential, and command injection vulnerabilities. When coupled together, they can be leveraged to achieve remote access as root via ssh.
