CVE-2024-39091: Annke Crater 2 Firmware

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An OS command injection vulnerability in the ccm_debug component of MIPC Camera firmware prior to v5.4.1.240424171021 allows attackers within the same network to execute arbitrary code via a crafted HTML request.

Affected products

• Annke Crater 2 Firmware: version 5.4.1.221222153318 only

Published 2024-08-12. Last modified 2026-06-17.