Details of VAR-201704-1527

ID

VAR-201704-1527

CVE

CVE-2017-7461

TITLE

Intellinet NFC-30ir IP Camera of Firmware Web Directory traversal vulnerability in base administration site

Trust: 0.8

sources: JVNDB: JVNDB-2017-003130

DESCRIPTION

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path sanitization. The Intellinet NFC-30irIP camera is a digital device based on network transmission. Intellinet NFC-30ir IP Camera is an IP network camera produced by American Intellinet company

Trust: 2.25

sources: NVD: CVE-2017-7461 // JVNDB: JVNDB-2017-003130 // CNVD: CNVD-2017-05504 // VULHUB: VHN-115664

IOT TAXONOMY

category:	['Network device']	sub_category:	-	Trust: 0.6
category:	['camera device']	sub_category:	IP camera	Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2017-05504

AFFECTED PRODUCTS

vendor:	intellinet network	model:	nfc-30ir	scope:	eq	version:	lm.1.6.16.05	Trust: 1.6
vendor:	intellinet	model:	nfc-30ir ip camera	scope:	eq	version:	lm.1.6.16.05	Trust: 0.8
vendor:	intellinet	model:	nfc-30ir ip camera lm.1.6.16.05	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2017-05504 // JVNDB: JVNDB-2017-003130 // CNNVD: CNNVD-201704-585 // NVD: CVE-2017-7461

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-7461
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2017-7461
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2017-05504
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201704-585
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-115664
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2017-7461
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2017-05504
severity:	MEDIUM
baseScore:	6.3
vectorString:	AV:N/AC:M/AU:S/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	6.8
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-115664
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-7461
baseSeverity:	MEDIUM
baseScore:	4.9
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.2
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2017-05504 // VULHUB: VHN-115664 // JVNDB: JVNDB-2017-003130 // CNNVD: CNNVD-201704-585 // NVD: CVE-2017-7461

PROBLEMTYPE DATA

problemtype:

CWE-22

Trust: 1.9

sources: VULHUB: VHN-115664 // JVNDB: JVNDB-2017-003130 // NVD: CVE-2017-7461

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201704-585

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-201704-585

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-003130

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-115664

PATCH

title:

Top Page

url:

http://www.intellinet-network.com/

Trust: 0.8

sources: JVNDB: JVNDB-2017-003130

EXTERNAL IDS

db:	NVD	id:	CVE-2017-7461	Trust: 3.2
db:	EXPLOIT-DB	id:	41829	Trust: 3.1
db:	JVNDB	id:	JVNDB-2017-003130	Trust: 0.8
db:	CNNVD	id:	CNNVD-201704-585	Trust: 0.7
db:	CNVD	id:	CNVD-2017-05504	Trust: 0.6
db:	OTHER	id:	NONE	Trust: 0.1
db:	VULHUB	id:	VHN-115664	Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2017-05504 // VULHUB: VHN-115664 // JVNDB: JVNDB-2017-003130 // CNNVD: CNNVD-201704-585 // NVD: CVE-2017-7461

REFERENCES

url:	https://www.exploit-db.com/exploits/41829/	Trust: 3.1
url:	https://nvd.nist.gov/vuln/detail/cve-2017-7461	Trust: 1.4
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-7461	Trust: 0.8
url:	https://ieeexplore.ieee.org/abstract/document/10769424	Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2017-05504 // VULHUB: VHN-115664 // JVNDB: JVNDB-2017-003130 // CNNVD: CNNVD-201704-585 // NVD: CVE-2017-7461

SOURCES

db:	OTHER	id:	-
db:	CNVD	id:	CNVD-2017-05504
db:	VULHUB	id:	VHN-115664
db:	JVNDB	id:	JVNDB-2017-003130
db:	CNNVD	id:	CNNVD-201704-585
db:	NVD	id:	CVE-2017-7461

LAST UPDATE DATE

2025-04-20T22:54:43.375000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2017-05504	date:	2017-04-27T00:00:00
db:	VULHUB	id:	VHN-115664	date:	2017-04-18T00:00:00
db:	JVNDB	id:	JVNDB-2017-003130	date:	2017-05-16T00:00:00
db:	CNNVD	id:	CNNVD-201704-585	date:	2017-05-17T00:00:00
db:	NVD	id:	CVE-2017-7461	date:	2025-04-20T01:37:25.860

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2017-05504	date:	2017-04-27T00:00:00
db:	VULHUB	id:	VHN-115664	date:	2017-04-11T00:00:00
db:	JVNDB	id:	JVNDB-2017-003130	date:	2017-05-16T00:00:00
db:	CNNVD	id:	CNNVD-201704-585	date:	2017-04-11T00:00:00
db:	NVD	id:	CVE-2017-7461	date:	2017-04-11T15:59:00.323