CVE-2024-0778

creationtimestamp| type| source ---|---|--- 2024-01-22 17:31:27+00:00| seen| https://t.me/ctinow/171315 2024-01-30 18:17:15+00:00| seen| https://t.me/ctinow/176149 2024-02-16 08:46:19+00:00| seen| https://t.me/ctinow/186191 2024-08-09 22:25:27+00:00| published-proof-of-concept|...

CVE-2024-0778 Uniview ISC 2500-S VM.php setNatConfig os command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

CVE-2024-0778

CVE-2024-0778 affects Uniview ISC 2500-S (up to 20210930) via the function setNatConfig in /Interface/DevManage/VM.php. Manipulating the arguments natAddress, natPort, or natServerPort results in OS command injection. The vulnerability has been publicly disclosed and is being observed in the wild...