CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the Snapshot Endpoint of the affected Java component, specifically within the PlayController.java file, allowing remote attackers to manipulate the deviceId/channelId arguments. Successful exploitation could lead to unauthorized access to sensitive files on the server. Organizations using the vulnerable version of the Java component should prioritize patching this issue to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in 648540858 wvp-GB28181-pro 2.7.4-20260107. This affects an unknown part of the file PlayController.java of the component Snapshot Endpoint. The manipulation of the argument deviceId/channelId leads to path traversal. The attack may be initiated remotely. The exploit is publicly available and might be used.