Of course, note that to stream on multiple devices simultaneously, the media station or media server must have the desired hardware capacity, otherwise you will face a sharp drop in speed and reduced server performance. The media player will render the codec according to the type of device requesting it and provide it to the device. In fact, media servers are computers on which the media server software, such as Serviio, is installed, and other devices in the network send their desired media playback request to this server. With this program, you can render and prepare all kinds of audio, video, and image streams for presentation on various devices such as TVs, Blu-ray players, game consoles, or even smartphones.

Today we will learn about the Serviio media server Command Execution Exploit.Serviio is a powerful software for setting up a media server on internal networks.

This exploit works on Serviio Media Server from versions 1.4.0 to 1.8.0 (1.8 is the present version, by the way). Serviio media server is a free media server which allows users to stream media files (music, video or images) to renderer devices like a TV set, Bluray player, gaming console or mobile phone on your connected home network. This media server has a console component which runs on port 23423 by default. This module exploits an unauthenticated remote command execution vulnerability in this console component. This is possible because the console service exposes a REST API whose endpoint does not sanitize user-supplied data in the ‘VIDEO’ parameter of the ‘checkStreamUrl’ method. This parameter is used in a call to cmd.exe which results in execution of arbitrary commands. So imagine a hacker while port scanning a specific port on multiple machines as shown below gets one positive result. On performing a verbose scan with OS detection enabled to probe further, it is indeed clear that a Serviio Media Server is running on this specific port and our target OS is Windows, so we can use our exploit. Start Metasploit and load the module as shown below.

Serviio torrent