CVE-2024-12984

Amcrest IP2M-841B Web Interface webCapsConfig information disclosure

CVSS 6.9 MEDIUMEPSS 0.6%CWE-200 CWE-284

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.9EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 dez 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Produtos afetados

Amcrest · IP2M-841B Amcrest · IP2M-841W Amcrest · IPC-IP2M-841B Amcrest · IPC-IP3M-943B Amcrest · IPC-IP3M-943S Amcrest · IPC-IP3M-HX2B Amcrest · IPC-IPM-721S

Referências

https://netsecfish.notion.site/AMCREST-IP-Camera-Information-Disclosure-1596b683e67c8045ad10c16b3eed456f?pvs=4 https://vuldb.com/?ctiid.289377 https://vuldb.com/?id.289377 https://vuldb.com/?submit.461109