CVE-2024-12569
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 19, 2024
Updated: Jan 15, 2025
CWE ID 532
Summary
CVE-2024-12569 is a vulnerability affecting Milestone XProtect Device Pack drivers for third-party cameras. This issue arises when sensitive camera credentials are logged and exposed in the driver's file. An attacker can exploit this vulnerability under specific conditions to gain access to recording server credentials, potentially leading to unauthorized access and data breaches. This vulnerability poses a significant risk to organizations that use these affected drivers and could benefit from implementing updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share