CVE-2024-13894

🗓️ 06 Mar 2025 14:03:20Reported by CERT-PLType

Smartwares cameras vulnerable to path traversal, exposing sensitive information without vendor response.

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Microprogrammed Software for IP Cameras from Smartwares, models CIP-37210AT and C724IP, arises from the lack of measures to sanitize input data at the control level. This allows intruders to execute arbitrary commands.	10 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the telnet service provided by the microprogramming-based IP cameras from Smartwares, models CIP-37210AT and C724IP, allows a intruder to gain unauthorized access to protected information.	10 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Smartwares CIP-37210AT and C724IP IP cameras’ microprogramming software lies in the improper limitation of the path name to the restricted access directory. This allows intruders to gain unauthorized access to protected information.	10 Mar 202500:00	–	bdu_fstec
Circl	CVE-2024-13892	6 Mar 202515:10	–	circl
Circl	CVE-2024-13894	6 Mar 202515:10	–	circl
CNNVD	Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞	6 Mar 202500:00	–	cnnvd
CNNVD	Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞	6 Mar 202500:00	–	cnnvd
CNNVD	Smartwares CIP-37210AT和Smartwares C724IP 安全漏洞	6 Mar 202500:00	–	cnnvd
CVE	CVE-2024-13892	6 Mar 202514:00	–	cve
Cvelist	CVE-2024-13892 Command Injection in Smartwares cameras	6 Mar 202514:00	–	cvelist

Vulners

Node

smartwares cip-37210atRange≤3.3.0

smartwares c724ipRange≤3.3.0

[
  {
    "defaultStatus": "unknown",
    "product": "CIP-37210AT",
    "vendor": "Smartwares",
    "versions": [
      {
        "lessThanOrEqual": "3.3.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "product": "C724IP",
    "vendor": "Smartwares",
    "versions": [
      {
        "lessThanOrEqual": "3.3.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
smartwares	www.smartwares.eu/en-gb/smartwares-cip-37210at-indoor-wi-fi-camera-cip--37210at
cert	www.cert.pl/en/posts/2025/03/CVE-2024-13892/

17 Jun 2026 07:02Current

7.1High risk

Vulners AI Score7.1

CVSS 45.9

EPSS0.00694

SSVC

CWE-22