CVE-2023-6118

High

Description

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1.

SeverityHigh
CVSS7.5
Exploit probability—
ProductNeutron Neu-ipb210-28 Firmware
PublishedNov 23, 2023
First seenNov 23, 2023
Weakness typeCWE-25CWE-25

How to fix

Update
  • neutron neu-ipb210-28_firmwareb1130.1.0.1 or later
  • neutron ntl-pt-06wod-3mp_firmwareb1130.1.0.1 or later
  • neutron neu-ipb410-28_firmwareb1130.1.0.1 or later
  • neutron ntl-bc-01w_firmwareb1130.1.0.1 or later
  • neutron neu-ipbm211_firmwareb1130.1.0.1 or later
  • neutron ntl-pt-09-wos-3mp_firmwareb1130.1.0.1 or later
  • neutron neu-ipbm411_firmwareb1130.1.0.1 or later
  • neutron ntl-pt-10-4gwos-3mp_firmwareb1130.1.0.1 or later
  • neutron ipc2224-sr3-npf-36_firmwareb1130.1.0.1 or later
  • neutron ipc2624-sr3-npf-36_firmwareb1130.1.0.1 or later
  • neutron ntl-bc-03-snm_firmwareb1130.1.0.1 or later
  • neutron ntl-bc-03-snp_firmwareb1130.1.0.1 or later

Affected products

ProductAffected versionsFixed in
neutron neu-ipb210-28_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-pt-06wod-3mp_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipb410-28_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-bc-01w_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipbm211_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-pt-09-wos-3mp_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipbm411_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-pt-10-4gwos-3mp_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ipc2224-sr3-npf-36_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ipc2624-sr3-npf-36_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-bc-03-snm_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-bc-03-snp_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipd220-28_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-bc01-m_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipdm221_firmwarev < b1130.1.0.1b1130.1.0.1
neutron neu-ipdm421_firmwarev < b1130.1.0.1b1130.1.0.1
neutron ntl-ip05-3mp_firmwarev < b1130.1.0.1b1130.1.0.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.