6.9 Medium

CVE-2024-8655 A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5

Description

A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unknown part of the file /web-static/. The manipulation leads to files or directories accessible. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products and versions

Product	Affected versions	Fixed in
MNVR816 2.0	2.0.1.0.0 → 2.0.1.0.5	No fix stated
mnvr816_firmware 2.0	2.0.1.0.0 → 2.0.1.0.5	No fix stated

References

VDB-276963 | Mercury MNVR816 web-static file access vuldb.com
VDB-276963 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
Submit #401301 | Mercury MNVR816 Video Recorder 2.0.1.0.5 File and Directory Information Exposure vuldb.com

Timeline

Published September 10, 2024
Last modified September 12, 2024

Track this CVE