CVE-2024-54763

published 2025-01-06

CVE-2024-54763: An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.

Priority P2 74 medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

ITW EXPLOIT VulnCheck KEV

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.

Detection & IOCs extracted from sources · hover to see the quote

path /login/hostinfo.cgi↗

other shodan-query: http.title:"ipTIME"

other fofa-query: title="ipTIME"

• → Send an unauthenticated HTTP GET request to /login/hostinfo.cgi; a vulnerable device responds with HTTP 200, Content-Type: text/plain, and a body beginning with the string 'ipTIME'.
• → Response body starts with the literal string 'ipTIME' (regex anchor '^ipTIME'), confirming unauthenticated disclosure of sensitive host information.
• → Vulnerable devices can be discovered via Shodan using the query http.title:"ipTIME" or FOFA using title="ipTIME".

• · Vulnerability is confirmed only on ipTIME A2004 firmware version 12.17.0; other versions are not explicitly stated as affected. ↗
• · The Nuclei template is verified (verified: true) and requires only 1 HTTP request (max-request: 1), making it a low-noise, high-confidence check.

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

vulncheck 6.5 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.