PT-2024-12284 · Unknown+1 · Zoneminder+1

Published 2024-10-15 · Updated 2025-05-27 · CVE-2023-31493

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions ZoneMinder versions up to 1.36.33

Description A Remote Code Execution (RCE) issue exists, allowing an attacker to create a new .php log file in the language folder and execute a crafted payload, escalating privileges to execute any commands on the remote system. This is due to an arbitrary file upload vulnerability in the Languages folder, enabling attackers to execute arbitrary code via uploading a crafted PHP file.

Recommendations For ZoneMinder versions up to 1.36.33, patch immediately to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the language folder to minimize the risk of exploitation. Avoid using the language folder for uploading files until the issue is resolved.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-31493

Affected Products

Debian

Zoneminder

References · 15

• 🔥 https://medium.com/%40dk50u1/rce-remote-code-execution-in-zoneminder-up-to-1-36-33-0686f5bcd370 · Exploit
• https://osv.dev/vulnerability/CVE-2023-31493 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31493 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31493 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-31493 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31493 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-31493 · Security Note
• https://ubuntu.com/security/CVE-2023-31493 · Vendor Advisory
• https://t.me/cvenotify/123699 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1846260526994633203 · Twitter Post
• https://twitter.com/CVEnew/status/1846202180845686802 · Twitter Post
• https://t.me/cvedetector/7924 · Telegram Post
• https://medium.com/@dk50u1/rce-remote-code-execution-in-zoneminder-up-to-1-36-33-0686f5bcd370 · Note
• https://twitter.com/oktsec/status/1846229076727435739 · Twitter Post
• http://zoneminder.com · Note