CVE-2024-6080

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jun 17, 2024
Updated: Aug 6, 2024
CWE ID 428

Summary

CVE-2024-6680 is a newly disclosed critical vulnerability affecting Intelbras InControl version 2.21.56. The issue lies within the unquoted search path of the incontrolWebcam service, which can be exploited through local access. This vulnerability, identified as VDB-268822, has been made public and could potentially be exploited. It is important to note that the vendor has been contacted about the disclosure and intends to release a solution within the coming weeks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share