Description
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Xiongmai Technology IP Cameras and DVRs | Xiongmai Technology IP Cameras and DVRs | — |
Advisories 1
- ICSA-17-341-01 Xiongmai Technology IP Cameras and DVRs CISA ICS & IT advisories · Dec 7, 2017