CVE-2024-13130

Summary

CVE-2024-13130 is a newly disclosed vulnerability affecting Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, and IPC-HDW1200S up to version 20241222. This issue, which has been rated as problematic, lies within the unknown functionality of the file ../mtd/Config/Sha1Account1 in the Web Interface component. Manipulation of this file allows an attacker to perform a path traversal attack with the string '../filedir'. The vulnerability can be exploited remotely, and the exploit has been made public. Despite early disclosure to the vendor, no response was received from them.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.