CVE-2024-9325
CVE-2024-9325
Título es
CVE-2024-9325
Dom, 29/09/2024 – 08:15
Tipo
CWE-428
Gravedad v2.0
6.80
Gravedad 2.0 Txt
MEDIUM
Título en
CVE-2024-9325
Descripción en
A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The vendor was informed early on 2024-08-05 about this issue. The release of a fixed version 2.21.58 was announced for the end of August 2024 but then was postponed until 2024-09-20.
29/09/2024
29/09/2024
Vector CVSS:3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vector CVSS:2.0
AV:L/AC:L/Au:S/C:C/I:C/A:C
Gravedad 3.1 (CVSS 3.1 Base Score)
7.80
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
HIGH
Referencias
Enviar en el boletín
Off
