CVE-2023-26036

Published Feb 25, 2023

Last updated 2 years ago

Overview

Description: ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/index.php. By controlling $view, any local file ending in .php can be executed. This is supposed to be mitigated by calling detaintPath, however dentaintPath does not properly sandbox the path. This can be exploited by constructing paths like "..././", which get replaced by "../". This issue is patched in versions 1.36.33 and 1.37.33.
Source: security-advisories@github.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: CWE-426
security-advisories@github.com: CWE-426

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4A5EDFC-FCEB-4982-A3D1-C95814646A27",
            "versionEndExcluding": "1.36.33"
          },
          {
            "criteria": "cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B1AF3896-BC5B-4FB6-842D-29B621F987E4",
            "versionEndExcluding": "1.37.33",
            "versionStartIncluding": "1.37.00"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

Weaknesses

Configurations

References