CVE-2024-12897

CVSS V2 None CVSS V3 None
Description
A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Overview
  • CVE ID
  • CVE-2024-12897
  • Assigner
  • VulDB
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-22T23:31:05.102Z
  • Last Modified Date
  • 2024-12-22T23:31:05.102Z
Weakness Enumerations
CWE URL
CWE-24 http://cwe.mitre.org/data/definitions/24.html
CWE-23 http://cwe.mitre.org/data/definitions/23.html
References
Reference URL Reference Tags
https://vuldb.com/?id.289167 vdb-entry
https://vuldb.com/?ctiid.289167 signature permissions-required
https://vuldb.com/?submit.464260 third-party-advisory
https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4 exploit
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-12897
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12897
History
Created Old Value New Value Data Type Notes
2024-12-23 13:10:17 Added to TrackCVE