CVE-2024-12896

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Dec 22, 2024
Updated: Dec 24, 2024
CWE ID 284
CWE ID 200

Summary

CVE-2024-12896 is a newly disclosed vulnerability affecting Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3, and VIP S4320 G2 up to version 20241222. This issue lies within the Web Interface component's /web_caps/webCapsConfig file and is classified as problematic. The manipulation of this file leads to information disclosure. The attack can be launched remotely, and the exploit has been made public. While the vendor downplays the significance of the disclosed information, assessing it as non-sensitive, the potential risks and implications remain unclear.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share