Vulnerability · Published Aug 27, 2025 · Assigned by VulnCheck
CVE-2024-13982SPON IP Network Intercom System rj_get_token.php Arbitrary File Read
High 8.7
In plain English
A high-severity path traversal in SPON IP Network Broadcast System from Changsha SPON Communication Technology Co. Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Official description
SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an arbitrary file read vulnerability in the rj_get_token.php endpoint. The flaw arises from insufficient input validation on the jsondata[url] parameter, which allows attackers to perform directory traversal and access sensitive files on the server. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted POST request to read arbitrary files, potentially exposing system configuration, credentials, or internal logic. An affected version range is undefined.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Changsha SPON Communication Technology Co. Ltd. | SPON IP Network Broadcast System | * |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://blog.csdn.net/qq_36618918/article/details/135505570 technical-description, exploit
- https://sponcomm.com/collections/ip-intercom-system product
- https://www.vulncheck.com/advisories/spon-ip-network-intercom-system-arbitrary-file-read third-party-advisory