CVE-2024-33435

2024-04-2900:00:00

mitre

www.cve.org

vulnerability

guangzhou yingshi electronic technology co.

remote attacker

arbitrary code

ipsetup.php

backend function

AI Score

7.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function