CVE-2024-9325

Summary

CVE-2024-9325 is a critical vulnerability identified in Intelbras InControl versions up to 2.21.56, which affects the file located at C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The vulnerability arises from an unquoted search path issue that allows local host exploitation, posing significant risks to confidentiality, integrity, and availability within affected systems. The vendor was notified of this vulnerability on August 5, 2024, and a fix was initially planned for release by the end of August but has since been postponed to September 20, 2024. Organizations utilizing the affected products are advised to update their software to version 2.21.58 upon its release to mitigate the risks associated with this vulnerability. With a CVSS base score of 7.8 and an exploitability score of 1.8, it is classified as having high severity and poses a low barrier for potential attackers due to its low attack complexity and required privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.