deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-11805
Published: 2024-12-03
Description: The Quick License Manager – WooCommerce Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'submit_qlm_products' parameter in all versions up to, and including, 2.4.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3198437/quick-license-manager/trunk?contextall=1&old=3198391&old_path=%2Fquick-license-manager%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/7c781c8a-1ffb-438b-bf78-9d386fbd16eb?source=cve
CVE: CVE-2024-11853
Published: 2024-12-03
Description: The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. It was determined that the patch in 2.0.16 was insufficient, and 2.0.17 is considered the fully patched version.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/jalbum-bridge/tags/2.0.15/jalbum-bridge.php#L41; https://plugins.trac.wordpress.org/changeset/3198794/; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227528%40jalbum-bridge&new=3227528%40jalbum-bridge&sfp_email=&sfph_mail=
CVE: CVE-2024-11898
Published: 2024-12-03
Description: The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits,  referrals, sales and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swin-campaign' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/scratch-win-giveaways-for-website-facebook/tags/2.6.9/socialscratchwin.php#L155; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3199234%40scratch-win-giveaways-for-website-facebook&new=3199234%40scratch-win-giveaways-for-website-facebook&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5b7f3f0f-5f02-41d7-ac37-ecdde74fc532?source=cve
CVE: CVE-2024-11844
Published: 2024-12-03
Description: The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete terms for the "boards" taxonomy.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ideapush/trunk/ideapush.php#L766; https://plugins.trac.wordpress.org/changeset/3198488/ideapush/trunk/ideapush.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/34603c3f-834f-4a2a-9b9f-5213155d4317?source=cve
CVE: CVE-2024-11866
Published: 2024-12-03
Description: The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_tabbed_map' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3198537%40bmlt-tabbed-map&new=3198537%40bmlt-tabbed-map&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/49958e9e-7f9b-48fb-bfe2-5b1b437171d6?source=cve
CVE: CVE-2024-11325
Published: 2024-12-03
Description: The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/aweber-wp/trunk/includes/eoi-subscribers.php#L353; https://plugins.trac.wordpress.org/changeset/3198559/aweber-wp/trunk/includes/eoi-subscribers.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/21c09207-38a1-47ae-ae1e-52f8eea4785d?source=cve
CVE: CVE-2024-11782
Published: 2024-12-03
Description: The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mst_subscribe' shortcode in all versions up to, and including, 1.8.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-mailster/tags/1.8.17.0/mailster/subscr/SubscriberPlugin.php#L216; https://plugins.trac.wordpress.org/changeset/3198497/wp-mailster/trunk/mailster/subscr/SubscriberPlugin.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/909beed4-06a9-4ec4-bf00-4072a38af82b?source=cve
CVE: CVE-2024-12062
Published: 2024-12-03
Description: The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/charity-addon-for-elementor/trunk/elementor/lib/lib.php#L12; https://www.wordfence.com/threat-intel/vulnerabilities/id/7ac68314-c704-4273-addc-4bc623659769?source=cve
CVE: CVE-2024-45106
Published: 2024-12-03
Description: Improper authentication of an HTTP endpoint in the S3 Gateway of Apache Ozone 1.4.0 allows any authenticated Kerberos user to revoke and regenerate the S3 secrets of any other user. This is only possible if:
  *  ozone.s3g.secret.http.enabled is set to true. The default value of this configuration is false.
  *  The user configured in ozone.s3g.kerberos.principal is also configured in ozone.s3.administrators or ozone.administrators.


Users are recommended to upgrade to Apache Ozone version 1.4.1 which disables the affected endpoint.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-863
References: https://lists.apache.org/thread/rylnxwttp004kvotpk9j158vb238pfkm; http://www.openwall.com/lists/oss-security/2024/12/02/1
CVE: CVE-2024-47476
Published: 2024-12-03
Description: Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://www.dell.com/support/kbdoc/en-us/000255884/dsa-2024-477-security-update-for-dell-networker-runtime-environment-nre-multiple-component-vulnerabilities
CVE: CVE-2024-11326
Published: 2024-12-03
Description: The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/campaign-monitor-wp/trunk/includes/eoi-subscribers.php#L353; https://plugins.trac.wordpress.org/changeset/3198560/campaign-monitor-wp/trunk/includes/eoi-subscribers.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/95ebb2ad-91a8-4a0d-ba91-f417943545b4?source=cve
CVE: CVE-2024-10074
Published: 2024-12-03
Description: in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-12.md
CVE: CVE-2024-12082
Published: 2024-12-03
Description: in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-922
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-12.md
CVE: CVE-2024-42422
Published: 2024-12-03
Description: Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS Score: 8.3 (HIGH)
CWE: CWE-639
References: https://www.dell.com/support/kbdoc/en-us/000255892/dsa-2024-478-security-update-for-dell-networker-vulnerabilities
CVE: CVE-2024-9978
Published: 2024-12-03
Description: in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-12.md
CVE: CVE-2024-11200
Published: 2024-12-03
Description: The Goodlayers Core plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘font-family’ parameter in all versions up to, and including, 2.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://goodlayers.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e1baa3f0-28ec-409f-a9a5-c35545ab439a?source=cve
CVE: CVE-2024-11391
Published: 2024-12-03
Description: The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset/3199242/; https://www.wordfence.com/threat-intel/vulnerabilities/id/f14a658c-1517-4af4-8bd7-c379ac07ab35?source=cve
CVE: CVE-2024-12101
Published: 2024-12-03
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-53257
Published: 2024-12-03
Description: Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered using text/template instead of rendering with a proper HTML templating engine. This vulnerability is fixed in 21.0.1, 20.0.4, and 19.0.8.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/vitessio/vitess/commit/2b71d1b5f8ca676beeab[PII_REDACTED]cd45096217; https://github.com/vitessio/vitess/security/advisories/GHSA-7mwh-q3xm-qh6p
CVE: CVE-2024-53999
Published: 2024-12-03
Description: Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The application allows users to upload files with scripts in the filename parameter. As a result, a malicious user can upload a script file to the system. When users in the application use the "Diff or Compare" functionality, they are affected by a Stored Cross-Site Scripting vulnerability. This vulnerability is fixed in 4.2.9.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/27d165872847f5ae7417caf09f37edeeba741e1e; https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-5jc6-h9w7-jm3p
CVE: CVE-2024-54000
Published: 2024-12-03
Description: Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. In versions prior to 3.9.7, the requests.get() request in the _check_url method is specified as allow_redirects=True, which allows a server-side request forgery when a request to .well-known/assetlinks.json" returns a 302 redirect. This is a bypass of the fix for CVE-2024-29190 and is fixed in 3.9.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/f22c584aa7d43527970c9da61eb678953cfc0a8e; https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6
CVE: CVE-2021-29892
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-25019
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 

could be vulnerable to malicious file upload by not validating the type of file uploaded to Journal entry attachments. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attacks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-25035
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 



exposes server details that could allow an attacker to obtain information of the application environment to conduct further attacks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-25036
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 





could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-288
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-29404
Published: 2024-12-03
Description: An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export parameter of the Chroma Effects function in the Profiles component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://github.com/mansk1es/CVE-2024-29404_Razer; https://www.razer.com/synapse-3; https://www.zerodayinitiative.com/blog/2022/3/16/abusing-arbitrary-file-deletes-to-escalate-privilege-and-other-great-tricks
CVE: CVE-2024-37302
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can lead to a denial of service, ranging from further media uploads/downloads failing to completely unavailability of the Synapse process, depending on how Synapse was deployed. Synapse 1.106 introduces a new "leaky bucket" rate limit on remote media downloads to reduce the amount of data a user can request at a time. This does not fully address the issue, but does limit an unauthenticated user's ability to request large amounts of data to be cached.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/element-hq/synapse/security/advisories/GHSA-4mhg-xv73-xq2x
CVE: CVE-2024-37303
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote participants to trigger a download and caching of remote media from a remote homeserver to the local media repository. Such content then also becomes available for download from the local homeserver in an unauthenticated way. The implication is that unauthenticated remote adversaries can use this functionality to plant problematic content into the media repository. Synapse 1.106 introduces a partial mitigation in the form of new endpoints which require authentication for media downloads. The unauthenticated endpoints will be frozen in a future release, closing the attack vector.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/element-hq/synapse/security/advisories/GHSA-gjgr-7834-rhxr; https://github.com/matrix-org/matrix-spec-proposals/pull/3916
CVE: CVE-2024-40691
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 

could be vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.
CVSS Score: 8.0 (HIGH)
CWE: CWE-434
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-52805
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. In Synapse before 1.120.1, multipart/form-data requests can in certain configurations transiently increase memory consumption beyond expected levels while processing the request, which can be used to amplify denial of service attacks. Synapse 1.120.1 resolves the issue by denying requests with unsupported multipart/form-data content type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/element-hq/synapse/security/advisories/GHSA-rfq8-j7rh-8hf2; https://github.com/twisted/twisted/issues/4688#issuecomment[PII_REDACTED]; https://github.com/twisted/twisted/issues/4688#issuecomment[PII_REDACTED]
CVE: CVE-2024-52815
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects such invalid invites received over federation and restores the ability to sync for affected users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/element-hq/synapse/security/advisories/GHSA-f3r3-h2mq-hx2h
CVE: CVE-2024-53863
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. In Synapse versions before 1.120.1, enabling the dynamic_thumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for processing. This significantly expands the attack surface in a historically vulnerable area, presenting a risk that far outweighs the benefit, particularly since these formats are rarely used on the open web or within the Matrix ecosystem. Synapse 1.120.1 addresses the issue by restricting thumbnail generation to images in the following widely used formats: PNG, JPEG, GIF, and WebP. This vulnerability is fixed in 1.120.1.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://github.com/element-hq/synapse/security/advisories/GHSA-vp6v-whfm-rv3g
CVE: CVE-2024-53867
Published: 2024-12-03
Description: Synapse is an open-source Matrix homeserver. The Sliding Sync feature on Synapse versions between 1.113.0rc1 and 1.120.0 can leak partial room state changes to users no longer in a room. Non-state events, like messages, are unaffected. This vulnerability is fixed in 1.120.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-497
References: https://github.com/element-hq/synapse/security/advisories/GHSA-56w4-5538-8v8h; https://github.com/matrix-org/matrix-spec-proposals/pull/4186
CVE: CVE-2023-7255
Published: 2024-12-03
Description: Rejected reason: Assigned as duplicate and no longer used.
CVE: CVE-2024-25020
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 













is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further attacks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-41775
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-41776
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 











is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-41777
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 









contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-45676
Published: 2024-12-03
Description: IBM Cognos Controller 11.0.0 and 11.0.1 







could allow an authenticated user to upload insecure files, due to insufficient file type distinction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-351
References: https://www.ibm.com/support/pages/node/7177220
CVE: CVE-2024-52544
Published: 2024-12-03
Description: An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerability has been resolved in firmware version 2[PII_REDACTED].8.R.20241111.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://github.com/sfewer-r7/LorexExploit; https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
CVE: CVE-2024-52545
Published: 2024-12-03
Description: An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876). This vulnerability has been resolved in firmware version 2[PII_REDACTED].8.R.20241111.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/sfewer-r7/LorexExploit; https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/