CVE-2024-54763

MEDIUM EXPLOITED NUCLEI

ipTIME A2004 <12.17.0 - Info Disclosure

Title source: llm

Exploitation Summary

CVE-2024-54763 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.

Nuclei Templates (1)

ipTIME A2004 - Unauthorized Access

MEDIUMVERIFIEDby ritikchaddha

Shodan: http.title:"ipTIME"

FOFA: title="ipTIME"

References (1)

Core 1

Core References

Various Sources

https://github.com/Shuanunio/CVE_Requests/blob/main/ipTIME/A2004/ipTIME_A2004_unauthorized_access_vulnerability_first.md

View Writeup ZIP pw:eip

Scores

CVSS v3 6.5

EPSS 0.0075

EPSS Percentile 49.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

VulnCheck KEV 2025-06-28

Status published

Published Jan 06, 2025

Tracked Since Feb 18, 2026