Web Attack: CCTV-DVR Remote Code Execution

[Migration User]

Hello,

we got this alert message from our symantec on cloud:

A high-risk intrusion was detected on [Machine name on our cloud] within group Default Group on 5/3/2017 8:49:52 AM.

IPS Alert Name
Attack: an intrusion attempt was blocked.

Status
Blocked

Attack Signature
Web Attack: CCTV-DVR Remote Code Execution

Targeted Application
SYSTEM

Targeted Port Number
80

Targeted Host Name
N/A

Few questions on this:

1. what is it the "CCTV-DVR Remote Code Execution" ?

2.Do we need to do something to be protected from it?

Thanks.

[ℬrίαη]

You can read their brief write up here:

https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=29627

I wold identify the device and ensure it is fully up to date on it's firmware. You may need to contact the vendor to assist with this.

[Migration User]

Hello,

thanks for your reply.

it opens empty link.

see attached file.

 

Attachment(s)

symantec_0.docx   37 KB 1 version