Aver PTC310UV2 Firmware Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the AVer PTC310UV2 camera firmware version 0.1.0000.59. The issue arises in the web interface, specifically within the SendAction function, which allows attackers to execute arbitrary code on the device.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Reproduction

The vulnerability can be reproduced by accessing the camera's web interface and invoking the SendAction function. This action can be performed remotely, taking advantage of the exposed endpoint that allows code execution.