CVE-2024-12897: Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal
A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12897?
CVE-2024-12897 has been classified as critical.
Which devices are affected by CVE-2024-12897?
CVE-2024-12897 affects Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3, and VIP S4320 G2 models up to version 20241222.
What kind of vulnerability is CVE-2024-12897?
CVE-2024-12897 involves a manipulation that leads to path traversal in the web interface.
How do I mitigate CVE-2024-12897?
To mitigate CVE-2024-12897, ensure that your affected devices are updated to a version later than 20241222.
What should I do if I am using a vulnerable device related to CVE-2024-12897?
If you are using a vulnerable device, it is essential to apply the latest firmware updates to protect against CVE-2024-12897.