Improper Access Control in C-MOR Video Surveillance by za-internet

CVE-2024-45170

What is CVE-2024-45170?

A vulnerability has been identified in C-MOR Video Surveillance version 5.2401, where improper access control allows low privileged users to exploit administrative functions via the web interface. The restriction of access to certain functionalities is only enforced on the user interface level, not on the server side. This oversight permits unauthorized users to send specific HTTP requests to the C-MOR web server, granting them access to sensitive actions such as downloading backup files and altering configuration settings.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References