Sign-up

ID

VAR-202202-0828


CVE

CVE-2022-24610


TITLE

alecto  of  dvc-215ip  Insufficient Credential Protection Vulnerability in Firmware

Trust: 0.8

sources: JVNDB: JVNDB-2022-006261

DESCRIPTION

Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/removing the style of the password field the password becomes visible which grants access to an internal network connected to the camera. alecto of dvc-215ip A firmware vulnerability related to insufficient protection of credentials exists.Information may be obtained. Alecto DVC-215IP is a camera from Alecto. An information disclosure vulnerability exists in Alecto DVC-215IP 63.1.1.173 and earlier

Trust: 2.16

sources: NVD: CVE-2022-24610 // JVNDB: JVNDB-2022-006261 // CNVD: CNVD-2022-71117

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

category:['camera device']sub_category:camera

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2022-71117

AFFECTED PRODUCTS

vendor:alectomodel:dvc-215ipscope:gteversion:63.1.1.137

Trust: 1.0

vendor:alectomodel:dvc-215ipscope:ltversion:63.1.1.173

Trust: 1.0

vendor:alectomodel:dvc-215ipscope: - version: -

Trust: 0.8

vendor:alectomodel:dvc-215ipscope:eqversion: -

Trust: 0.8

vendor:alectomodel:dvc-215ipscope:eqversion:dvc-215ip firmware 63.1.1.137 that's all 63.1.1.173

Trust: 0.8

vendor:alectomodel:dvc-215ipscope:lteversion:<=63.1.1.173

Trust: 0.6

sources: CNVD: CNVD-2022-71117 // JVNDB: JVNDB-2022-006261 // NVD: CVE-2022-24610

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-24610
value: HIGH

Trust: 1.0

NVD: CVE-2022-24610
value: HIGH

Trust: 0.8

CNVD: CNVD-2022-71117
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-202202-1860
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2022-24610
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2022-71117
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2022-24610
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 4.0
version: 3.1

Trust: 1.0

NVD: CVE-2022-24610
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2022-71117 // JVNDB: JVNDB-2022-006261 // CNNVD: CNNVD-202202-1860 // NVD: CVE-2022-24610

PROBLEMTYPE DATA

problemtype:CWE-522

Trust: 1.0

problemtype:Inadequate protection of credentials (CWE-522) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-006261 // NVD: CVE-2022-24610

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202202-1860

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202202-1860

PATCH

title:Patch for Alecto DVC-215 IP Information Disclosure Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/358031

Trust: 0.6

title:Alecto DVC-215IP Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=184639

Trust: 0.6

sources: CNVD: CNVD-2022-71117 // CNNVD: CNNVD-202202-1860

EXTERNAL IDS

db:NVDid:CVE-2022-24610

Trust: 3.9

db:JVNDBid:JVNDB-2022-006261

Trust: 0.8

db:CNVDid:CNVD-2022-71117

Trust: 0.6

db:CNNVDid:CNNVD-202202-1860

Trust: 0.6

db:OTHERid:NONE

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2022-71117 // JVNDB: JVNDB-2022-006261 // CNNVD: CNNVD-202202-1860 // NVD: CVE-2022-24610

REFERENCES

url:https://support.alecto.nl/nl/support/solutions/articles/48001210271-kwetsbaarheid-vulnerability-firmware-below-version-63-1-1-173

Trust: 3.0

url:https://nvd.nist.gov/vuln/detail/cve-2022-24610

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2022-24610/

Trust: 0.6

url:https://ieeexplore.ieee.org/abstract/document/10769424

Trust: 0.1

sources: OTHER: None // CNVD: CNVD-2022-71117 // JVNDB: JVNDB-2022-006261 // CNNVD: CNNVD-202202-1860 // NVD: CVE-2022-24610

SOURCES

db:OTHERid: -
db:CNVDid:CNVD-2022-71117
db:JVNDBid:JVNDB-2022-006261
db:CNNVDid:CNNVD-202202-1860
db:NVDid:CVE-2022-24610

LAST UPDATE DATE

2025-01-30T22:41:18.331000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2022-71117date:2022-10-25T00:00:00
db:JVNDBid:JVNDB-2022-006261date:2023-07-03T08:59:00
db:CNNVDid:CNNVD-202202-1860date:2022-03-10T00:00:00
db:NVDid:CVE-2022-24610date:2024-11-21T06:50:44.837

SOURCES RELEASE DATE

db:CNVDid:CNVD-2022-71117date:2022-10-25T00:00:00
db:JVNDBid:JVNDB-2022-006261date:2023-07-03T00:00:00
db:CNNVDid:CNNVD-202202-1860date:2022-02-24T00:00:00
db:NVDid:CVE-2022-24610date:2022-02-24T15:15:29.673