PT-2024-17784 · Intelbras · Intelbras Vip S4020 G3+3

Netsecfish · Published 2024-12-22 · Updated 2024-12-27 · CVE-2024-12897

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras VIP S3020 G2 versions up to 20241222 Intelbras VIP S4020 G2 versions up to 20241222 Intelbras VIP S4020 G3 versions up to 20241222 Intelbras VIP S4320 G2 versions up to 20241222

Description A critical vulnerability was found in the Web Interface component of Intelbras VIP cameras, affecting an unknown part of the file ../mtd/Config/Sha1Account1. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations For Intelbras VIP S3020 G2 versions up to 20241222, consider disabling remote access to the Web Interface until a patch is available. For Intelbras VIP S4020 G2 versions up to 20241222, restrict access to the ../mtd/Config/Sha1Account1 file to minimize the risk of exploitation. For Intelbras VIP S4020 G3 versions up to 20241222, avoid using the Web Interface until the issue is resolved. For Intelbras VIP S4320 G2 versions up to 20241222, consider temporarily disabling the Web Interface component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Relative Path Traversal

Weakness Enumeration

CWE-23

CWE-24

Related Identifiers

CVE-2024-12897

Affected Products

Intelbras Vip S3020 G2

Intelbras Vip S4020 G2

Intelbras Vip S4020 G3

Intelbras Vip S4320 G2

References · 11

• 🔥 https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7 · Exploit
• 🔥 https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-12897 · Security Note
• https://twitter.com/CVEnew/status/1870976929999823358 · Twitter Post
• https://vuldb.com/?id.289167 · Note
• https://vuldb.com/?ctiid.289167 · Note
• https://t.me/cvenotify/105577 · Telegram Post
• https://vuldb.com/?submit.464260 · Note
• https://t.me/cvenotify/105261 · Telegram Post
• https://t.me/cvedetector/13521 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1870993049653768651 · Twitter Post