PT-2024-1260 · Uniview · Uniview Isc 2500-S

H3110W0R1D

·

Published

2024-01-22

·

Updated

2024-08-01

·

CVE-2024-0778

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Uniview ISC 2500-S versions up to 20210930
Description A critical vulnerability has been found in the Uniview ISC 2500-S, affecting the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the arguments natAddress, natPort, and natServerPort leads to OS command injection. This issue may be exploited by attackers to inject malicious code and potentially take control of vulnerable cameras. The exploit has been disclosed to the public and may be used. The vulnerability is linked to the notorious Mirai botnet.
Recommendations For Uniview ISC 2500-S versions up to 20210930, the vendor has confirmed that the product is end-of-life and should be retired and replaced. As a temporary workaround, consider disabling the setNatConfig function until a replacement is available. Restrict access to the /Interface/DevManage/VM.php file to minimize the risk of exploitation. Avoid using the arguments natAddress, natPort, and natServerPort in the affected function until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-00666
CVE-2024-0778

Affected Products

Uniview Isc 2500-S