Description Preview
A problematic vulnerability has been identified in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, and IPC-HDW1200S up to version 20241222. This vulnerability is related to an unknown functionality of the file ../mtd/Config/Sha1Account1 of the Web Interface component. The manipulation of this file can lead to a path traversal: '../filedir'. This vulnerability can be exploited remotely and the exploit has been disclosed to the public. The vulnerability has been rated as medium severity with a CVSS v4.0 base score of 5.3 and CVSS v3.1 base score of 4.3.
Overview
The vulnerability was discovered by netsecfish (VulDB User) and was published by VulDB on January 5, 2025. The affected Dahua products include IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, and IPC-HDW1200S. The vulnerability is related to path traversal and relative path traversal issues (CWE-24 and CWE-23).
Remediation
As of now, there is no specific remediation provided for this vulnerability. Users are advised to monitor the vendor's website and other reliable sources for any updates or patches that may be released to address this vulnerability. It is also recommended to limit the exposure of the affected products to trusted networks to reduce the risk of exploitation.
References
- VDB-290204 | Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal
- VDB-290204 | CTI Indicators (IOB, IOC, TTP, IOA)
- Submit #464260 | IntelBras IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z, IPC-HDW1200S, VIP S3020 G2, VIP S4020 G2, VIP S4320 G2, VIP S4020 G3 WebVersion: 3.2.1.225946; WebVersion: 3.2.1.291804 Path Traversal
- Path Traversal Vulnerability in IntelBras IP Cameras mtd/Config/Sha1Account1 and mtd-Confi-15e6b683e67c80809442ee3425f753b7
Industry ExposureMost to leastThis section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
- Accommodation & Food ServicesAccommodation & Food Services
- Administrative, Support, Waste Management & Remediation ServicesAdministrative, Support, Waste Management & Remediation Services
- Agriculture, Forestry Fishing & HuntingAgriculture, Forestry Fishing & Hunting
- Arts, Entertainment & RecreationArts, Entertainment & Recreation
- ConstructionConstruction
- Educational ServicesEducational Services
- Finance and InsuranceFinance and Insurance
- Health Care & Social AssistanceHealth Care & Social Assistance
- InformationInformation
- Management of Companies & EnterprisesManagement of Companies & Enterprises
- ManufacturingManufacturing
- MiningMining
- Other Services (except Public Administration)Other Services (except Public Administration)
- Professional, Scientific, & Technical ServicesProfessional, Scientific, & Technical Services
- Public AdministrationPublic Administration
- Real Estate Rental & LeasingReal Estate Rental & Leasing
- Retail TradeRetail Trade
- Transportation & WarehousingTransportation & Warehousing
- UtilitiesUtilities
- Wholesale TradeWholesale Trade
