Lucene search

CVE-2024-7029

🗓️ 02 Aug 2024 15:37:16Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 21 Media mentions👁 124 Views🌐 WEB

Network injection vulnerability allows unauthenticated command execution

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 12
ICS	AVTECH IP camera	1 Aug 202406:00	–	ics
NVD	CVE-2024-7029	2 Aug 202415:16	–	nvd
Nuclei	AVTECH IP Camera - Command Injection	3 Sep 202414:43	–	nuclei
GithubExploit	Exploit for Command Injection in Avtech Avm1203 Firmware	2 Sep 202410:16	–	githubexploit
GithubExploit	Exploit for Command Injection in Avtech Avm1203 Firmware	8 Oct 202410:04	–	githubexploit
Vulnrichment	CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)	2 Aug 202415:08	–	vulnrichment
Cvelist	CVE-2024-7029 Command Injection in AVTech AVM1203 (IP Camera)	2 Aug 202415:08	–	cvelist
RedhatCVE	CVE-2024-7029	5 Feb 202511:41	–	redhatcve
AttackerKB	CVE-2024-7029	2 Aug 202400:00	–	attackerkb
Qualys Blog	Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai	21 Jan 202516:05	–	qualysblog

Nvd

Node

avtech avm1203_firmwareRange≤fullimg-1023-1007-1011-1009

AND

avtech avm1203Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "AVM1203 (IP Camera)",
    "vendor": "AVTech",
    "versions": [
      {
        "lessThanOrEqual": "FullImg-1023-1007-1011-1009",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-214-07
akamai	www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt

Parameter	Position	Path	Description	CWE
command	request body	/path/to/vulnerable/endpoint	Allows command injection over the network due to lack of authentication.	CWE-77

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Aug 2024 15:16Current

8.8High risk

Vulners AI Score8.8

CVSS38.8 - 9.8

CVSS48.7

EPSS0.87727

SSVC