CVE-2024-13130
CVSS 2.0 Score 4.0 of 10 (medium)
Details
Published Jan 5, 2025
Updated: Jan 10, 2025
CWE ID 24
CWE ID 23
Summary
CVE-2024-13130 is a newly identified vulnerability affecting Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, and IPC-HDW1200S models up to version 20241222. This issue, rated as problematic, impacts the Web Interface component and specifically the file ../mtd/Config/Sha1Account1. An attacker can exploit this path traversal vulnerability, located at '../filedir', to manipulate the affected system remotely. The exploit for this vulnerability has been disclosed to the public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.