Lucene search

MitreVULNRICHMENT:CVE-2024-25458

HistoryMay 01, 2024 - 12:00 a.m.

CVE-2024-25458

2024-05-0100:00:00

mitre

github.com

cyczcam

shix zhao

shixcam

a9 camera

firmware

vulnerability

udp port

crafted request

AI Score

6.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:cyczcam_shix_zhao_shixcam:a9_camera_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "cyczcam_shix_zhao_shixcam",
    "product": "a9_camera_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "CYCAM_48B_BC01_v87_0903"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

tanzhuyin.com/posts/cve-2024-25458/