CVE-2024-4584 - Faraday GM8181/GM828x command_port.ini information disclosure

Back Back to CVE browser

MEDIUM

Faraday GM8181/GM828x command_port.ini information disclosure

Published May 7, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 0.60%

Description

A vulnerability, which was classified as problematic, has been found in Faraday GM8181 and GM828x up to 20240429. Affected by this issue is some unknown functionality of the file /command_port.ini. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263306 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Faraday Product GM828x Default
n/a
- Version
  20240429
  Status
  affected
  Constraints
  -
Vendor Faraday Product n/a Default
n/a
- Version
  20240429
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Faraday

GM828x

n/a

Version	Status	Constraints
20240429	affected	-

Faraday

n/a

Version	Status	Constraints
20240429	affected	-

Vendor Faraday Product Gm828x Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <20240429
Vendor Faraday Product n/a Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <20240429

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Faraday

Gm828x

n/a

Version	Status	Constraints
0	affected	<20240429

Faraday

n/a

Version	Status	Constraints
0	affected	<20240429

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (4)

https://netsecfish.notion.site/Information-Disclosure-in-Faraday-Technology-Grain-Media-GM828x-GM8181-DVR-via-Unauthenticated-Acc-3d184791c8d7405ba9d6a49e7a5bd918?pvs=4
exploit
https://vuldb.com/?ctiid.263306
signaturepermissions-required
https://vuldb.com/?id.263306
vdb-entry
https://vuldb.com/?submit.324404
third-party-advisory

Link	Providers	Tags
https://netsecfish.notion.site/Information-Disclosure-in-Faraday-Technology-Grain-Media-GM828x-GM8181-DVR-via-Unauthenticated-Acc-3d184791c8d7405ba9d6a49e7a5bd918?pvs=4		exploit
https://vuldb.com/?ctiid.263306		signaturepermissions-required
https://vuldb.com/?id.263306		vdb-entry
https://vuldb.com/?submit.324404		third-party-advisory