CVE-2024-1965

MEDIUM

Haivision's Aviwest Manager & Aviwest Steamhub - SSRF

Title source: llm
STIX 2.1

Description

Server-Side Request Forgery vulnerability in Haivision's Aviwest Manager and Aviwest Steamhub. This vulnerability could allow an attacker to enumerate internal network configuration without the need for credentials. An attacker could compromise an internal server and retrieve requests sent by other users.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0035
EPSS Percentile 26.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
haivision/maanager
haivision/streamhub
Published Feb 28, 2024
Tracked Since Feb 18, 2026