Lucene search

K
cve[email protected]CVE-2013-4977
HistoryMar 03, 2014 - 4:55 p.m.

CVE-2013-4977

2014-03-0316:55:00
CWE-119
web.nvd.nist.gov
47
cve-2013-4977
buffer overflow
hikvision
ds-2cd7153-e
ip camera
rtsp
denial of service
remote code execution

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.096 Low

EPSS

Percentile

94.7%

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.096 Low

EPSS

Percentile

94.7%