An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanisms, the C-MOR web interface is vulnerable to cross-site request forgery (CSRF) attacks. The C-MOR web interface offers no protection against cross-site request forgery (CSRF) attacks.
References
| Link | Resource |
|---|---|
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-022.txt | Exploit Vendor Advisory |
| https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030 | Vendor Advisory |
| http://seclists.org/fulldisclosure/2024/Sep/10 | Exploit Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
04 Sep 2025, 16:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-022.txt - Exploit, Vendor Advisory | |
| References | () https://www.syss.de/pentest-blog/mehrere-sicherheitsschwachstellen-in-videoueberwachungssoftware-c-mor-syss-2024-020-bis-030 - Vendor Advisory | |
| References | () http://seclists.org/fulldisclosure/2024/Sep/10 - Exploit, Mailing List, Third Party Advisory | |
| First Time |
C-mor
C-mor c-mor Video Surveillance |
|
| CPE | cpe:2.3:a:c-mor:c-mor_video_surveillance:5.2401:*:*:*:*:*:*:* cpe:2.3:a:c-mor:c-mor_video_surveillance:6.00:patch_level_01:*:*:*:*:*:* |
Information
Published : 2024-09-04 20:15
Updated : 2025-09-04 16:29
NVD link : CVE-2024-45172
Mitre link : CVE-2024-45172
CVE.ORG link : CVE-2024-45172
JSON object : View
Products Affected
c-mor
- c-mor_video_surveillance
CWE
CWE-352
Cross-Site Request Forgery (CSRF)