CVE-2024-33435

2024-04-2900:00:00

mitre

github.com

vulnerability

permissions

guangzhou yingshi electronic technology co

ncast yingshi

remote attacker

arbitrary code

ipsetup.php

AI Score

7.9

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:guangzhou_yingshi_electronic_technology:ncast_yingshi:-:*:*:*:*:*:*:*"
    ],
    "vendor": "guangzhou_yingshi_electronic_technology",
    "product": "ncast_yingshi",
    "versions": [
      {
        "status": "affected",
        "version": "2007",
        "versionType": "custom",
        "lessThanOrEqual": "2017"
      }
    ],
    "defaultStatus": "unknown"
  }
]