TI-2024-30272 Aliases CVE-2024-45175 GHSA-cx8j-vf9x-758j

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401.

MEDIUM 41CWE-22Published 2024-09-05 · Updated 2024-09-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-312.

Summary

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login credentials of cameras, is stored in cleartext. Thus, an attacker with filesystem access, for example exploiting a path traversal attack, has access to the login data of all configured cameras, or the configured FTP server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00667 52nd percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:::::::*	5.2401	Vulnerable	C-mor
cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01::::::	6.00 patch_level_01	Vulnerable	C-mor

cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:* Versions 5.2401 Vulnerable ·C-mor
cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01:*:*:*:*:*:* Versions 6.00 patch_level_01 Vulnerable ·C-mor

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-45175
2026-10-03 Alias added: GHSA-cx8j-vf9x-758j

References

Exploit 2

Advisory 1

https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030

TI-2024-30271 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. CVSS 3.1HIGH 8.1
TI-2024-30267 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. CVSS 3.1HIGH 8.1
TI-2024-30276 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. CVSS 3.1HIGH 7.2
TI-2024-30269 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. CVSS 3.1MEDIUM 6.8
TI-2024-30275 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. CVSS 3.1HIGH 7.1
TI-2024-30274 An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. CVSS 3.1MEDIUM 5.4

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences