CVE-2024-9324

Summary

CVE-2024-9324 is a critical vulnerability affecting Intelbras InControl up to version 2.21.57. This issue impacts an unidentified functionality within the Relatório de Operadores Page's /v1/operador/ component. Maliciously crafted argument fields can lead to code injection, allowing remote attackers to exploit the system. The vulnerability has been disclosed publicly, increasing the risk of exploitation. Users are urged to upgrade to version 2.21.58 as soon as possible to mitigate the risk. Intelbras was informed of the issue on July 19, 2024, and initially planned to release a fixed version by the end of August, but the release was subsequently postponed until September 20, 2024.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.