CVE-2024-9325 | THREATINT

Description

A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed early on 2024-08-05 about this issue. The release of a fixed version 2.21.58 was announced for the end of August 2024 but then was postponed until 2024-09-20.

Es wurde eine Schwachstelle in Intelbras InControl bis 2.21.56 entdeckt. Sie wurde als kritisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. Dank Manipulation mit unbekannten Daten kann eine unquoted search path-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Ein Aktualisieren auf die Version 2.21.58 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.

Reserved 2024-09-28 | Published 2024-09-29 | Updated 2024-11-04 | Assigner VulDB

HIGH: 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

HIGH: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8AV:L/AC:L/Au:S/C:C/I:C/A:C

Problem types

Unquoted Search Path

Untrusted Search Path

Product status

2.21.0

affected

2.21.1

affected

2.21.2

affected

2.21.3

affected

2.21.4

affected

2.21.5

affected

2.21.6

affected

2.21.7

affected

2.21.8

affected

2.21.9

affected

2.21.10

affected

2.21.11

affected

2.21.12

affected

2.21.13

affected

2.21.14

affected

2.21.15

affected

2.21.16

affected

2.21.17

affected

2.21.18

affected

2.21.19

affected

2.21.20

affected

2.21.21

affected

2.21.22

affected

2.21.23

affected

2.21.24

affected

2.21.25

affected

2.21.26

affected

2.21.27

affected

2.21.28

affected

2.21.29

affected

2.21.30

affected

2.21.31

affected

2.21.32

affected

2.21.33

affected

2.21.34

affected

2.21.35

affected

2.21.36

affected

2.21.37

affected

2.21.38

affected

2.21.39

affected

2.21.40

affected

2.21.41

affected

2.21.42

affected

2.21.43

affected

2.21.44

affected

2.21.45

affected

2.21.46

affected

2.21.47

affected

2.21.48

affected

2.21.49

affected

2.21.50

affected

2.21.51

affected

2.21.52

affected

2.21.53

affected

2.21.54

affected

2.21.55

affected

2.21.56

affected

Timeline

2024-09-28:	Advisory disclosed
2024-09-28:	VulDB entry created
2024-11-04:	VulDB entry last update

Credits

j369 (VulDB User) reporter

References

vuldb.com/?id.278829 (VDB-278829 | Intelbras InControl incontrol-service-watchdog.exe unquoted search path) vdb-entry technical-description

vuldb.com/?ctiid.278829 (VDB-278829 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.385397 (Submit #385397 | Intelbras InControl 2.21.56 Unquoted Search Path) third-party-advisory

backend.intelbras.com/...a - Incontrol 2.21.56 e 2.21.57.pdf related

download.cronos.intelbras.com.br/...ca3eabb71c854005c78b.exe patch

cve.org (CVE-2024-9325)

nvd.nist.gov (CVE-2024-9325)

Download JSON