Back to Database
Status published
High
CVE-2024-11136
Arbitrary file removal via path traversal in TCL Camera
Vulnerability Description
The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11136
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Szymon Chadam
References
More from TCL
View All →CVE-2022-27660
A denial of service vulnerability exists in the confctl_set_guest_wlan functionality...
Critical
9.3
CVE-2022-27633
An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of...
Medium
6.5
CVE-2022-27630
An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of...
Medium
6.5
CVE-2022-27185
A denial of service vulnerability exists in the confctl_set_master_wlan functionality...
Critical
9.3
CVE-2022-27178
A denial of service vulnerability exists in the confctl_set_wan_cfg functionality...
Critical
9.6
Affected Vendor
Affected Software
Camera
Vulnerable Versions:
v6.00.04.0067.3.0
Timeline
Official Publish:
November 14th, 2024
Last Modified:
November 14th, 2024
Added to House:
July 22nd, 2026