CVE-2024-37665

2024-06-1200:00:00

mitre

github.com

access control

wvp gb28181

privilege escalation

crafted request

AI Score

6.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An access control issue in Wvp GB28181 Pro 2.0 allows authenticated attackers to escalate privileges to Administrator via a crafted POST request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wvp:gb28181_pro:*:*:*:*:*:*:*:*"
    ],
    "vendor": "wvp",
    "product": "gb28181_pro",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]