Medium severity6.8NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026
CVE-2024-45172
CVE-2024-45172
Description
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanisms, the C-MOR web interface is vulnerable to cross-site request forgery (CSRF) attacks. The C-MOR web interface offers no protection against cross-site request forgery (CSRF) attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:*
- cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 5.2401, 6.00PL01
- Range: 5.2401, 6.00PL01
Patches
Vulnerability mechanics
References
3- seclists.org/fulldisclosure/2024/Sep/10nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-022.txtnvdExploitVendor Advisory
- www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030nvdVendor Advisory
News mentions
0No linked articles in our index yet.