CVE-2024-13894

Vulnerability

Smartwares cameras CIP-37210AT and C724IP, as well as other models sharing the same firmware up to version 3.3.0, are vulnerable to path traversal [CVE description]. When the camera is connected to a mobile app, it opens port 10000, allowing users to download pictures by specifying file paths. However, the application does not properly restrict directory access, enabling an attacker to traverse directories and retrieve arbitrary files [1].

Exploitation

An attacker with network access to the camera's port 10000 can exploit this vulnerability without authentication [CVE description]. The attack requires the camera to be connected to the mobile app, but no special privileges are needed beyond network proximity. This opens the door to accessing sensitive information stored on the device [2].

Impact

Successful exploitation allows an attacker to download any file from the camera's filesystem, including sensitive images, configuration files, or other data. The vulnerability is part of a series of issues reported by CERT Polska, including command injection and use of default credentials [1].

Mitigation

The vendor has not responded to reports, leaving the patching status unknown [1]. Newer firmware versions may also be vulnerable. Users should consider network segmentation, blocking port 10000 with firewalls, or discontinuing use until a fix becomes available.