[yorwba]

The link to the PoC is the same as for this submission: https://news.ycombinator.com/item?id=22251329

Same vulnerability. The reason HiSilicon couldn't provide the fix is that they didn't write the firmware running on those devices, Xiongmai did. This information was added as an update to the original writeup.

[fisherjeff]

More interesting info on Xiongmai if anyone’s unfamiliar:

https://krebsonsecurity.com/2018/10/naming-shaming-web-pollu...