Lucene search

IcscertCVE-2024-7029

HistoryAug 02, 2024 - 3:16 p.m.

CVE-2024-7029

2024-08-0215:16:37

CWE-77

icscert

web.nvd.nist.gov

In Wild

network injection

unauthenticated execution

command injection

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

8.8

Confidence

High

EPSS

0.338

Percentile

97.1%

JSON

Commands can be injected over the network and executed without authentication.

Affected configurations

Nvd

Node

avtechavm1203_firmwareRange≤fullimg-1023-1007-1011-1009

AND

avtechavm1203Match-

VendorProductVersionCPE
avtechavm1203_firmware*cpe:2.3:o:avtech:avm1203_firmware:*:*:*:*:*:*:*:*
avtechavm1203-cpe:2.3:h:avtech:avm1203:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
avtech	avm1203_firmware	*	cpe:2.3:o:avtech:avm1203_firmware::::::::
avtech	avm1203	-	cpe:2.3:h:avtech:avm1203:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AVM1203 (IP Camera)",
    "vendor": "AVTech",
    "versions": [
      {
        "lessThanOrEqual": "FullImg-1023-1007-1011-1009",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt

www.cisa.gov/news-events/ics-advisories/icsa-24-214-07

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

8.8

Confidence

High

EPSS

0.338

Percentile

97.1%

JSON

Related for CVE-2024-7029