CVE-2024-33435

2024-04-2900:00:00

mitre

www.cve.org

vulnerability

guangzhou yingshi electronic technology co.

remote attacker

arbitrary code

ipsetup.php

backend function

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function