CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-32874

Medium Severity
SVRS
30/100

CVSSv3
NA/10

EPSS
0.0022/1

CVE-2024-32874 impacts Frigate, a network video recorder (NVR). This vulnerability allows an attacker to cause a denial of service (DoS) by uploading a file or retrieving a filename with an excessively long Unicode name. The lack of filename length limitations and the inefficient Unicode normalization process using NFKD within secure_filename() are the root causes.

While the CVSS score is 0, SOCRadar's Vulnerability Risk Score (SVRS) is 30, indicating a low risk but the 'In The Wild' tag is an important indicator that the vulnerability is currently being exploited. By exploiting this denial-of-service vulnerability, attackers can disrupt Frigate's functionality, potentially impacting surveillance and monitoring systems. Although not critical based on SVRS, this vulnerability requires monitoring due to the 'In The Wild' tag and implementing filename length restrictions in Frigate to prevent potential abuse and ensure system stability. Proper input validation is crucial to mitigating such risks.

In The Wild
2024-05-14

2024-05-14
Eye Icon
SOCRadar
AI Insight

Description

CVE-2024-32874 is a vulnerability with a CVSS score of 0, indicating a low severity level. However, SOCRadar's unique 'SOCRadar Vulnerability Risk Score' (SVRS) assigns it a score of 30, highlighting the potential for significant impact. This discrepancy stems from SOCRadar's integration of various 'Vulnerability Intelligence' elements, including Social Media, News, Code Repositories, Dark/Deep Web data, and associations with Threat Actors and malware.

Key Insights

  • Active Exploitation: The vulnerability is actively exploited in the wild, posing an immediate threat to organizations.
  • Low CVSS Score: The CVSS score of 0 may underestimate the severity of the vulnerability, as it does not fully capture the potential impact identified by SOCRadar's SVRS.
  • SVRS of 30: The SVRS score of 30 indicates a moderate level of risk, requiring prompt attention and mitigation measures.
  • Unknown Description: The lack of a detailed description for CVE-2024-32874 makes it challenging to fully understand its nature and potential impact.

Mitigation Strategies

  • Apply Software Updates: Install the latest software updates and patches to address the vulnerability.
  • Enable Security Controls: Implement security controls such as firewalls, intrusion detection systems, and anti-malware software to prevent exploitation.
  • Monitor Network Traffic: Monitor network traffic for suspicious activity and investigate any anomalies.
  • Educate Users: Train users on cybersecurity best practices, including recognizing and reporting suspicious emails or links.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

Vulnerability Summary for the Week of May 13, 2024
CISA2024-05-20
of the file /view/networkConfig/GRE/gre_add_commit.php. The manipulation of the argument name/remote/local/IP leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263937 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. 2024-05-14 6.3 <a
cisa.gov
rss
forum
news
CVE-2024-32874 | blakeblackshear frigate up to 0.13.1 secure_filename allocation of resources
vuldb.com2024-05-09
CVE-2024-32874 | blakeblackshear frigate up to 0.13.1 secure_filename allocation of resources | A vulnerability classified as problematic was found in blakeblackshear frigate up to 0.13.1. Affected by this vulnerability is the function secure_filename. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2024-32874. The attack can be launched remotely. There is no exploit available. It is recommended
cve-2024-32874
domains
urls
cves

Social Media

CVE-2024-32874 Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Below 0.13.2 Release, when uploading a file or retrieving the filename,… https://t.co/91vDfMsWzu
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://github.com/blakeblackshear/frigate/commit/cc851555e4029647986dccc8b8ecf54afee31442
[email protected]https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq

CWE Details

CWE IDCWE NameDescription
CWE-770Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence