Description
A vulnerability, which was classified as problematic, has been found in Faraday GM8181 and GM828x up to 20240429. Affected by this issue is some unknown functionality of the file /command_port.ini. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263306 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Faraday | GM8181 | 20240429 | — |
| Faraday | GM828x | 20240429 | — |
References
- VDB-263306 | Faraday GM8181/GM828x command_port.ini information disclosure vdb-entry
- VDB-263306 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #324404 | Faraday Technology(Grain-Media) DVR GM828x, GM8181 Exposure of Sensitive System Information to an Unauthorized Cont third-party-advisory
- https://netsecfish.notion.site/Information-Disclosure-in-Faraday-Technology-Grain-Media-GM828x-GM8181-DVR-via-Unauthenticated-Acc-3d184791c8d7405ba9d6a49e7a5bd918?pvs=4 exploit