CVE-2024-0778
Published: 22 January 2024
Summary
CVE-2024-0778 is a high-severity OS Command Injection (CWE-78) vulnerability in Uniview Isc 2500-S Firmware. Its CVSS base score is 8.0 (High).
Operationally, ranked in the top 2.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2024-0778 is an OS command injection vulnerability, tracked as CWE-78, that affects the setNatConfig function in the file /Interface/DevManage/VM.php of Uniview ISC 2500-S appliances up to version 20210930. The flaw arises from unsanitized handling of the natAddress, natPort, and natServerPort arguments and was assigned a CVSS 3.1 score of 8.0. The product is explicitly unsupported and end-of-life.
An attacker with adjacent-network access and low privileges can supply crafted values to these parameters and execute arbitrary operating-system commands on the device, resulting in full compromise of confidentiality, integrity, and availability.
Vendor contact confirmed that the product is no longer maintained and should be retired and replaced; no patches or mitigations are provided.
Public exploit code has been released. The EPSS score rose materially from lower values after disclosure to a peak of 0.6118 on 2025-12-11 before receding to the current 0.4972.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-16566
Vulnerability details
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort…
more
leads to os command injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251696. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.