C Mor maintains a focused video surveillance product portfolio with a modest vulnerability footprint relative to its prominence in the security camera market. The vendor's disclosed issues reflect the application-layer and integration challenges typical of networked surveillance systems. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by C Mor over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-45171HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to upload dangerous files, for instance PHP code, to t | Sep 5, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-45173HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper privilege management concerning sudo privileges, C-MOR is vulnerable to a privilege escalati | Sep 5, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-45175HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Sensitive information is stored in cleartext. It was found out that sensitive information, for example login | Sep 5, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-45174HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-supplied data, different functionalities of the C-MOR web in | Sep 4, 2024 | 8.1 | 23 | NO | NO |
CVE-2024-45170HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MO | Sep 4, 2024 | 8.1 | 22 | NO | NO |
CVE-2024-45179HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validation, the C-MOR web interface is vulnerable to OS command injec | Oct 9, 2024 | 7.2 | 21 | NO | NO |
CVE-2024-45178HIGH An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper user input validation, it is possible to download arbitrary files from the C-MOR system via | Sep 5, 2024 | 7.1 | 21 | NO | NO |
CVE-2024-45176MEDIUM An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input validation, the C-MOR web interface is vulnerable to reflected cross-site scripting (X | Sep 5, 2024 | 6.1 | 19 | NO | NO |
CVE-2024-45172MEDIUM An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanisms, the C-MOR web interface is vulnerable to cross-site reque | Sep 4, 2024 | 6.8 | 19 | NO | NO |
CVE-2024-45177MEDIUM An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper input validation, the C-MOR web interface is vulnerable to persistent cross-sit | Sep 4, 2024 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by C Mor.
Media articles that mention a CVE ID that affects a product developed by C Mor — matched by CVE ID, not by vendor name.