PT-2024-28946 · Hualai · Hualai Xiaofang Isc5

Kaizheng · Published 2024-04-23 · Updated 2024-06-04 · CVE-2024-4062

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hualai Xiaofang iSC5 version 3.2.2 112

Description A vulnerability was found in the software, classified as problematic, affecting some unknown functionality. The manipulation leads to improper certificate validation. The attack may be launched remotely. The complexity of an attack is rather high, and the exploitation is known to be difficult.

Recommendations For version 3.2.2 112, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2024-4062

Affected Products

Hualai Xiaofang Isc5

References · 8

• 🔥 https://github.com/kzLiu2017/CVE_Document/blob/main/Hualai_Xiaofang_camera.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4062 · Security Note
• https://t.me/cvenotify/77812 · Telegram Post
• https://vuldb.com/?ctiid.261788 · Note
• https://twitter.com/VulmonFeeds/status/1782870175827546432 · Twitter Post
• https://vuldb.com/?id.261788 · Note
• https://twitter.com/CVEnew/status/1782841288485671163 · Twitter Post
• https://vuldb.com/?submit.316407 · Note