PT-2024-7544 · D3D Security · D3D Security Ip Camera D8801

Priyanka R. Chaudhary · Published 2024-10-01 · Updated 2024-10-14 · CVE-2024-47790

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions D3D Security IP Camera D8801 (affected versions not specified)

Description The issue is related to the implementation of the Real-Time Streaming Protocol (RTSP) in the D3D Security IP Camera, which has weaknesses in its authorization procedure. This can be exploited by a remote attacker using a specially crafted RTSP packet to gain unauthorized access to the live video feed. The vulnerability affects products that are no longer supported by the manufacturer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2024-08941

CVE-2024-47790

Affected Products

D3D Security Ip Camera D8801

References · 13

• https://bdu.fstec.ru/vul/2024-08941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47790 · Security Note
• https://vuldb.com/?id.279228 · Note
• https://t.me/cvedetector/6976 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1842382135417778525 · Twitter Post
• https://t.me/cvenotify/97984 · Telegram Post
• https://twitter.com/CveFindCom/status/1842188216788562044 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0314 · Note
• https://twitter.com/VulmonFeeds/status/1842214539724485100 · Twitter Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0314 · Note
• https://t.me/latest_high_impact_cve/1250 · Telegram Post
• https://twitter.com/CVEnew/status/1842188362267963733 · Twitter Post
• https://twitter.com/FatmaYl73528380/status/1842977692825923865 · Twitter Post