CVE-2024-41717

published 2024-10-22

CVE-2024-41717: Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.

Priority P2 61 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
kieback_peter	ddc4002	<= 1.12.14	—
kieback_peter	ddc4002e	<= 1.17.6	—
kieback_peter	ddc4020e	<= 1.17.6	—
kieback_peter	ddc4040e	<= 1.17.6	—
kieback_peter	ddc4100	<= 1.7.4	—
kieback_peter	ddc4200	<= 1.12.14	—
kieback_peter	ddc4200-l	<= 1.12.14	—
kieback_peter	ddc4200e	<= 1.17.6	—
kieback_peter	ddc4400	<= 1.12.14	—
kieback_peter	ddc4400e	<= 1.17.6	—

Detection & IOCs extracted from sources · hover to see the quote

• → Path traversal vulnerability allows unauthenticated attacker to read arbitrary files on the system via the DDC4000 series web interface ↗
• → Chained exploitation path: use path traversal to read /etc/passwd and obtain password hashes for all users, then leverage weak/default credentials for full admin access ↗
• → Monitor for unauthenticated HTTP requests containing path traversal sequences (e.g., ../../) targeting Kieback&Peter DDC4000 series devices ↗

• · The path traversal (CVE-2024-41717) can be used to read /etc/passwd; the credential exposure (CVE-2024-43812) and weak credentials (CVE-2024-43698) are companion CVEs — all three are part of the same advisory and attack chain but are distinct vulnerabilities ↗
• · DDC4002, DDC4100, DDC4200, DDC4200-L, and DDC4400 are End-of-Life and will not receive patches; only DDC4002e/4200e/4400e/4020e/4040e running firmware v1.21.0 or later are remediated ↗
• · No public proof-of-concept or active exploitation has been reported as of the advisory date ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 9.3 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22