PT-2019-12734
CVE-2019-12289
·
تاريخ النشر
2019-05-23
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VStarcam 100T (C7824WIP) versions CH-sys-48.53.75.119 through CH-sys-48.53.75.123
VStarcam 200V (C38S) versions CH-sys-48.53.203.119 through CH-sys-48.53.203.123
Description
A remote command execution issue was found in the
upgrade firmware.cgi script. This allows an attacker to execute commands without authentication during a system firmware update. The attacker can modify internal firmware files or steal account information by executing commands.Recommendations
For VStarcam 100T (C7824WIP) versions CH-sys-48.53.75.119 through CH-sys-48.53.75.123, consider restricting access to the
upgrade firmware.cgi script until a patch is available.
For VStarcam 200V (C38S) versions CH-sys-48.53.203.119 through CH-sys-48.53.203.123, consider restricting access to the upgrade firmware.cgi script until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾