CVE-2024-5633

High

Description

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports.  An attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device.

SeverityHigh
CVSS7.5
Exploit probability—
ProductLBH30FE200W
PublishedJul 9, 2024
First seenJul 9, 2024
Weakness typeCWE-912CWE-912

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
Longse Technology LBH30FE200W0—
Zamel ZMB-01/C0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.