| शीर्षक | IntelBras IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, IPC-HDW1200S, VIP S3020 G2, VIP S4020 G2, VIP S4320 G2, VIP S4020 G3 WebVersion: 3.2.1.225946; WebVersion: 3.2.1.291804 Path Traversal |
|---|
| विवरण | A critical path traversal vulnerability has been identified in several IntelBras IP Camera devices, including models VIP S3020 G2, VIP S4020 G2, IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, and IPC-HDW1200S. This vulnerability allows attackers to bypass directory restrictions and access sensitive files, such as ../mtd/Config/Sha1Account1 and ../mtd/Config/Account1, which contain hashed/encrypted credentials and other configuration data. By exploiting this flaw, attackers can gain unauthorized access to the devices, potentially compromising system security and exposing critical information. |
|---|
| स्रोत | ⚠️ https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4 |
|---|
| उपयोगकर्ता | netsecfish (UID 64568) |
|---|
| सबमिशन | 16/12/2024 10:13 AM (2 साल पहले) |
|---|
| संयम | 04/01/2025 10:11 AM (19 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 290204 [Dahua IPC-HFW1200S तक 20241222 Web Interface Sha1Account1 सूचना का प्रकटीकरण] |
|---|
| अंक | 17 |
|---|