CVE-2024-12897: Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-23 · updated 2026-06-17
Weakness: CWE-23

Description

A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Intelbras VIP S3020 G2: 20241222
Intelbras VIP S4020 G2: 20241222
Intelbras VIP S4020 G3: 20241222
Intelbras VIP S4320 G2: 20241222

References

https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7?pvs=4
https://vuldb.com/?ctiid.289167
https://vuldb.com/?id.289167
https://vuldb.com/?submit.464260
https://netsecfish.notion.site/Path-Traversal-Vulnerability-in-IntelBras-IP-Cameras-mtd-Config-Sha1Account1-and-mtd-Confi-15e6b683e67c80809442ee3425f753b7

Get alerted when CVE-2024-12897 or the next vulnerability affects your stack