Search
Find a vulnerability
Search criteria
1 vulnerability by Provision-ISR
CVE-2025-0224 (GCVE-0-2025-0224)
Vulnerability from cvelistv5 – Published: 2025-01-05 16:31 – Updated: 2025-01-06 14:35
VLAI
Title
Provision-ISR SH-4050A-2 server.js information disclosure
Summary
A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity
5.3 (Medium)
5.3 (Medium)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.290203 | vdb-entry |
| https://vuldb.com/?ctiid.290203 | signaturepermissions-required |
| https://vuldb.com/?submit.467085 | third-party-advisory |
| https://netsecfish.notion.site/Sensitive-Device-I… | exploit |
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Provision-ISR | SH-4050A-2 |
Affected:
20241220
|
|
| Provision-ISR | SH-4100A-2L(MM) |
Affected:
20241220
|
|
| Provision-ISR | SH-8100A-2L(MM) |
Affected:
20241220
|
|
| Provision-ISR | SH-16200A-2(1U) |
Affected:
20241220
|
|
| Provision-ISR | SH-16200A-5(1U) |
Affected:
20241220
|
|
| Provision-ISR | NVR5-8200PX |
Affected:
20241220
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-0224",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-06T14:35:26.684518Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-06T14:35:35.301Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "SH-4050A-2",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
},
{
"product": "SH-4100A-2L(MM)",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
},
{
"product": "SH-8100A-2L(MM)",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
},
{
"product": "SH-16200A-2(1U)",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
},
{
"product": "SH-16200A-5(1U)",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
},
{
"product": "NVR5-8200PX",
"vendor": "Provision-ISR",
"versions": [
{
"status": "affected",
"version": "20241220"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "netsecfish (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used."
},
{
"lang": "de",
"value": "In Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX bis 20241220 wurde eine problematische Schwachstelle ausgemacht. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /server.js. Dank Manipulation mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-05T16:31:05.127Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-290203 | Provision-ISR SH-4050A-2 server.js information disclosure",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.290203"
},
{
"name": "VDB-290203 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.290203"
},
{
"name": "Submit #467085 | Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) , NVR5-8200PX 1.2.6.0R0.B180303h.1.D00.U2(4A21S), 1.2.6.0R0.B180303h.1.D00.U2(4A21T), 1.2.6.0R0.B180303h.1.N0K.U2(8A218), 1.2.6.0R0.B180303h.1 Information Disclos",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.467085"
},
{
"tags": [
"exploit"
],
"url": "https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-01-04T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-01-04T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-01-04T10:02:42.000Z",
"value": "VulDB entry last update"
}
],
"title": "Provision-ISR SH-4050A-2 server.js information disclosure"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-0224",
"datePublished": "2025-01-05T16:31:05.127Z",
"dateReserved": "2025-01-04T08:57:36.881Z",
"dateUpdated": "2025-01-06T14:35:35.301Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}