CVE-2024-12896 Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure
Remote attackers can access the webCapsConfig file to obtain potentially sensitive configuration information from Intelbras IP cameras.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-12896?
CVE-2024-12896 is a medium-severity vulnerability in Intelbras VIP S3020 G2, published on 22 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor assesses that "the information disclosed in the URL is not sensitive or poses any risk to the user".
Which versions are affected by CVE-2024-12896?
How do I fix CVE-2024-12896?
No fix has been published for CVE-2024-12896 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-12896 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-12896 exists.
Sources
Also known as GHSA-325m-pvh6-hvj7.