PT-2024-13444 · Imou Go · Imou Go

Published 2024-02-05 · Updated 2024-02-13 · CVE-2023-47353

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IMOU GO version 1.0.11

Description An issue in the com.oneed.dvr.service.DownloadFirmwareService component allows attackers to force the download of arbitrary files.

Recommendations For IMOU GO version 1.0.11, consider disabling the DownloadFirmwareService component until a patch is available. Restrict access to the com.oneed.dvr.service.DownloadFirmwareService component to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-494

Related Identifiers

CVE-2023-47353

Affected Products

Imou Go

References · 7

• 🔥 https://github.com/actuator/imou/blob/main/com.dahua.imou.go-V1.0.11.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-47353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47353 · Security Note
• https://play.google.com/store/apps/details?id=com.dahua.imou.go · Note
• https://t.me/cvenotify/70207 · Telegram Post
• https://twitter.com/CVEnew/status/1754686019876884680 · Twitter Post
• https://t.me/cvenotify/70144 · Telegram Post