CVE-2024-9324

Name of the Vulnerable Software and Affected Versions Intelbras InControl versions up to 2.21.57

Description A critical issue affects some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the fields argument leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For Intelbras InControl versions up to 2.21.57, upgrade to version 2.21.58 to address this issue. As a temporary workaround, consider restricting access to the /v1/operador/ endpoint of the Relatório de Operadores Page until the patch is applied.