CVE-2022-30621

HIGH

Cellinx NVT IP PTZ Camera Firmware - Unauthenticated Arbitrary File Read via GetFileContent.cgi

Title source: llm
STIX 2.1

Description

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.gov.il/en/departments/faq/cve_advisories

Scores

CVSS v3 7.6
EPSS 0.0060
EPSS Percentile 43.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H

Details

CWE
CWE-706
Status published
Products (2)
cellinx/cellinx_nvt_-_ip_ptz_camera_firmware 3.2.0
cellinx/cellinx_nvt_-_ip_ptz_camera_firmware 3.2.1
Published Jul 18, 2022
Tracked Since Feb 18, 2026