PT-2024-17851 · Wisi · Wisi Tangram Gt31

Havook · Published 2024-12-27 · Updated 2024-12-28 · CVE-2024-12989

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WISI Tangram GT31 versions up to 20241214

Description A server-side request forgery issue affects an unknown functionality of the component HTTP Request Handler. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

Recommendations For WISI Tangram GT31 versions up to 20241214, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-12989

Affected Products

Wisi Tangram Gt31

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12989 · Security Note
• https://vuldb.com/?submit.463798 · Note
• https://twitter.com/VulmonFeeds/status/1872792565604368483 · Twitter Post
• https://vuldb.com/?id.289382 · Note
• https://t.me/cvedetector/13791 · Telegram Post
• https://vuldb.com/?ctiid.289382 · Note
• https://twitter.com/CVEnew/status/1872889623548178707 · Twitter Post