Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-66rr-phv8-5jpp

Опубликовано: 09 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321

IP Cameras

with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321

IP Cameras

with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

EPSS

Процентиль: 73%
0.00789
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения IP-камер Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220 и CD321, вызванная переполнением буфера на стеке, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 73%
0.00789
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787