github.comexploit
https://github.com/netsecfish/intelbras_cap_js CVE-2024-3160
MEDIUM
Intelbras HDCVI 1016 HTTP GET Request cap.js information disclosure
Record summary
CVE-2024-3160 has a selected CVSS score of 5.3 (medium).
Description
** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008 and HDCVI 1016 up to 20240401. This affects an unknown part of the file /cap.js of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier VDB-258933 was assigned to this vulnerability. NOTE: The vendor explains that they do not classify the information shown as sensitive and therefore there is no vulnerability which is about to harm the user.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 26, 2024 · Source: CVE List
Affected products and versions
12| Product | Source | Version range | Status |
|---|---|---|---|
HDCVI 1008Browse Intelbras / HDCVI 1008 | CVE List | 20240401 | affected |
HDCVI 1016Browse Intelbras / HDCVI 1016 | CVE List | 20240401 | affected |
MHDX 1004Browse Intelbras / MHDX 1004 | CVE List | 20240401 | affected |
MHDX 1008Browse Intelbras / MHDX 1008 | CVE List | 20240401 | affected |
MHDX 1016Browse Intelbras / MHDX 1016 | CVE List | 20240401 | affected |
MHDX 5016Browse Intelbras / MHDX 5016 | CVE List | 20240401 | affected |
hdcvi_1008_firmwareBrowse intelbras / hdcvi_1008_firmwareDefault status: unknown | CVE List | 20240401 | affected |
hdcvi_1016_firmwareBrowse intelbras / hdcvi_1016_firmwareDefault status: unknown | CVE List | 20240401 | affected |
mhdx_1004_firmwareBrowse intelbras / mhdx_1004_firmwareDefault status: unknown | CVE List | 20240401 | affected |
mhdx_1008_firmwareBrowse intelbras / mhdx_1008_firmwareDefault status: unknown | CVE List | 20240401 | affected |
mhdx_1016_firmwareBrowse intelbras / mhdx_1016_firmwareDefault status: unknown | CVE List | 20240401 | affected |
mhdx_5016_firmwareBrowse intelbras / mhdx_5016_firmwareDefault status: unknown | CVE List | 20240401 | affected |
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-3160 VDB-258933 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.258933 VDB-258933 | Intelbras HDCVI 1016 HTTP GET Request cap.js information disclosurevdb entry
https://vuldb.com/?id.258933 Submit #305410 | Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 N/A Exposure of Sensitive Information to an Unauthorized ActorThird-party advisory
https://vuldb.com/?submit.305410