CVE-2024-13985

CVE-2024-13985 — Esegui codice in remoto su Dahua EIMS tramite capturehandle.action Tipo di advisory: Divulgazione di sicurezza coordinata con il venditore · Sfruttamento attivo segnalato ID CVE: CVE-2024-13985 ID CNVD: CNVD-2024-17054 Venditore: Zhejiang Dahua Technology Co., Ltd. Prodotto: EIMS...

CVE-2024-13985 Dahua EIMS capture_handle.action RCE

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...