CVE-2024-54764

published 2025-01-06

CVE-2024-54764: An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.

Priority P2 73 medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

ITW EXPLOIT VulnCheck KEV

An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication.

Detection & IOCs extracted from sources · hover to see the quote

path /login/hostinfo2.cgi↗

other shodan-query: http.title:"ipTIME"

other fofa-query: title="ipTIME"

• → Send an unauthenticated HTTP GET request to /login/hostinfo2.cgi; a vulnerable device returns HTTP 200 with content-type text/plain and body containing both 'product_name=' and 'system_type='.
• → Response body strings 'product_name=' and 'system_type=' (both present, AND condition) in a text/plain HTTP 200 response confirm unauthenticated information disclosure via hostinfo2.cgi.

• · Vulnerability is version-specific: only ipTIME A2004 firmware v12.17.0 is confirmed affected. Devices on later firmware versions may not be vulnerable. ↗
• · The Nuclei template is limited to max-request: 1, meaning a single GET to the endpoint is sufficient to confirm exploitation — no authentication or session token is required.

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

vulncheck 6.5 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.