PT-2024-17139 · Ipc · Ipc Unigy Management System

Braga · Published 2024-11-22 · Updated 2024-11-22 · CVE-2024-11618

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IPC Unigy Management System version 04.03.00.08.0027

Description A critical issue was found in the HTTP Request Handler component, which can lead to server-side request forgery. This issue can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For IPC Unigy Management System version 04.03.00.08.0027, consider restricting access to the HTTP Request Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-11618

Affected Products

Ipc Unigy Management System

References · 8

• 🔥 https://github.com/br484/br484.github.io/blob/main/archives/WEB/CVE%20-%20IPC%20Unigy%20-%20ingles.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-11618 · Security Note
• https://twitter.com/CVEnew/status/1860042353051877411 · Twitter Post
• https://vuldb.com/?submit.441817 · Note
• https://vuldb.com/?ctiid.285841 · Note
• https://github.com/br484/br484.github.io · Note
• https://t.me/latest_high_impact_cve/1547 · Telegram Post
• https://vuldb.com/?id.285841 · Note