CVE-2024-47903 | THREATINT

Description

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices allows to write arbitrary files to the web server's DocumentRoot directory.

Reserved 2024-10-04 | Published 2024-10-23 | Updated 2024-10-23 | Assigner siemens

MEDIUM: 5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Problem types

CWE-250: Execution with Unnecessary Privileges

Product status

Default status

unknown

Any version before V8.2.12

affected

Default status

unknown

Any version before V7.2.12

affected

References

cert-portal.siemens.com/productcert/html/ssa-333468.html

cve.org (CVE-2024-47903)

nvd.nist.gov (CVE-2024-47903)

Download JSON