CVE-2024-35343 - Vulnerability Details - OpenCVE

Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 (IP Cameras) firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact total

Vendors	Products
Anpviz	Ipc-b850 Firmware Ipc-d250 Firmware Ipc-d260 Firmware Ipc-d280 Firmware Ipc-d3150 Firmware Ipc-d3180 Firmware Ipc-d350 Firmware Ipc-d380 Firmware Ipc-d4250 Firmware Ipc-d850 Firmware Ipc-d880 Firmware Mc800n Firmware Ym200e10 Firmware Ym500l8 Firmware Ym800n N2 Firmware Ym800sv2 Firmware Ymf50b Firmware

No data.

No data.

References

Link	Providers
https://willgu.es/pages/anpviz-ip-camera-vuln.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-05-28T16:46:52.274Z

Updated: 2025-02-13T15:54:11.605Z

Reserved: 2024-05-17T00:00:00.000Z

Link: CVE-2024-35343

Vulnrichment

Updated: 2024-07-24T13:56:41.002Z

NVD

Status : Awaiting Analysis

Published: 2024-05-28T17:15:10.580

Modified: 2024-11-21T09:20:09.990

Link: CVE-2024-35343

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-35343", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-13T15:54:11.605Z", "datePublished": "2024-05-28T16:46:52.274Z", "dateReserved": "2024-05-17T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-28T16:46:52.646Z"}, "descriptions": [{"lang": "en", "value": "Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 (IP Cameras) firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://willgu.es/pages/anpviz-ip-camera-vuln.html"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "affected": [{"vendor": "anpviz", "product": "ipc-d250_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d250_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d260_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d260_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-b850_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-b850_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d850_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d850_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d350_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d350_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d3150_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d3150_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d4250_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d4250_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d380_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d380_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d880_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d880_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d280_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d280_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ipc-d3180_firmware", "cpes": ["cpe:2.3:o:anpviz:ipc-d3180_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "mc800n_firmware", "cpes": ["cpe:2.3:o:anpviz:mc800n_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ym800n_n2_firmware", "cpes": ["cpe:2.3:o:anpviz:ym800n_n2_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ymf50b_firmware", "cpes": ["cpe:2.3:o:anpviz:ymf50b_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ym800sv2_firmware", "cpes": ["cpe:2.3:o:anpviz:ym800sv2_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ym500l8_firmware", "cpes": ["cpe:2.3:o:anpviz:ym500l8_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}, {"vendor": "anpviz", "product": "ym200e10_firmware", "cpes": ["cpe:2.3:o:anpviz:ym200e10_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.2.2.2", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-07-24T13:43:00.623513Z", "id": "CVE-2024-35343", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-24T13:56:49.776Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:07:46.935Z"}, "title": "CVE Program Container", "references": [{"url": "https://willgu.es/pages/anpviz-ip-camera-vuln.html", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-35343", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-24T13:43:00.623513Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:anpviz:ipc-d250_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d250_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d260_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d260_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-b850_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-b850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d850_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d850_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d350_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d350_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d3150_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d3150_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d4250_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d4250_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d380_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d380_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d880_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d880_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d280_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d280_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ipc-d3180_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ipc-d3180_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:mc800n_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "mc800n_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ym800n_n2_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ym800n_n2_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ymf50b_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ymf50b_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ym800sv2_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ym800sv2_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ym500l8_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ym500l8_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:anpviz:ym200e10_firmware:*:*:*:*:*:*:*:*"], "vendor": "anpviz", "product": "ym200e10_firmware", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.2.2.2"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-24T13:56:41.002Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://willgu.es/pages/anpviz-ip-camera-vuln.html"}], "descriptions": [{"lang": "en", "value": "Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP GET request to the /playback/ URI. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 (IP Cameras) firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-28T16:46:52.646682"}}}, "cveMetadata": {"cveId": "CVE-2024-35343", "state": "PUBLISHED", "dateUpdated": "2024-07-24T13:56:49.776Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre"}, "dataVersion": "5.1"}