Lucene search

K
cvelistINCDCVELIST:CVE-2022-30621
HistoryJul 18, 2022 - 12:55 p.m.

CVE-2022-30621 Cellinx NVT – IP PTZ Camera local file inclusion

2022-07-1812:55:04
INCD
www.cve.org
4
cve-2022-30621
cellinx nvt
ip ptz camera
local file inclusion
getfilecontent.cgi
root user
os security

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

46.6%

Allows a remote user to read files on the camera’s OS “GetFileContent.cgi”. Reading arbitrary files on the camera’s OS as root user.

CNA Affected

[
  {
    "product": "Cellinx NVT - IP PTZ Camera",
    "vendor": "Cellinx",
    "versions": [
      {
        "lessThan": "3.2.0*",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

46.6%

Related for CVELIST:CVE-2022-30621