PT-2024-15456 · Guangzhou Yingke Electronic Technology · Ncast

Yyt · Published 2024-01-08 · Updated 2025-04-01 · CVE-2024-0305

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Guangzhou Yingke Electronic Technology Ncast versions up to 2017

Description A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast, affecting some unknown functionality of the file /manage/IPSetup.php of the component Guest Login. This issue leads to information disclosure and can be exploited remotely.

Recommendations For Guangzhou Yingke Electronic Technology Ncast versions up to 2017, consider restricting access to the /manage/IPSetup.php file to minimize the risk of exploitation. As a temporary workaround, limit the use of the Guest Login component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-0305

Affected Products

Ncast

References · 12

• 🔥 https://github.com/2267787739/cve/blob/main/logic.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-0305 · Security Note
• https://osv.dev/vulnerability/CVE-2024-0305 · Vendor Advisory
• https://vuldb.com/?id.249872 · Note
• https://twitter.com/AnagliWisdoms/status/1904115333436166335 · Twitter Post
• https://twitter.com/AnagliWisdoms/status/1904115330751832333 · Twitter Post
• https://twitter.com/AnagliWisdoms/status/1904115321868325108 · Twitter Post
• https://twitter.com/transilienceai/status/1907024930824401309 · Twitter Post
• https://twitter.com/CVEnew/status/1744280944771567986 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1744324830801850780 · Twitter Post
• https://vuldb.com/?ctiid.249872 · Note
• https://twitter.com/cracbot/status/1745899712178438526 · Twitter Post