Path Traversal Vulnerability in Smartwares Cameras by Smartwares

CVE-2024-13894

What is CVE-2024-13894?

Smartwares cameras, including the CIP-37210AT and C724IP models, are susceptible to path traversal attacks due to a flaw in their firmware versions up to 3.3.0. When these devices connect to a mobile application, they expose a critical vulnerability by opening port 10000. This flaw allows malicious users to gain unauthorized access to sensitive images by manipulating file paths. The directory access is not properly restricted, posing significant risks to user privacy and data security. As the vendor has not addressed these reports, the status of any potential patches remains uncertain, and newer firmware versions may also be at risk.

References