Log in Start free

Vulnerability · Published Dec 27, 2024 · Assigned by VulDB

CVE-2024-12984Amcrest IP2M-841B Web Interface webCapsConfig information disclosure

Medium 5.3

In plain English

A medium-severity information exposure in IP2M-841B from Amcrest. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.6%top 50.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

VendorProductVersions
Amcrest IP2M-841B 20241211
Amcrest IP2M-841W 20241211
Amcrest IPC-IP2M-841B 20241211
Amcrest IPC-IP3M-943B 20241211
Amcrest IPC-IP3M-943S 20241211
Amcrest IPC-IP3M-HX2B 20241211
Amcrest IPC-IPM-721S 20241211

Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References