CVE-2014-1201

🗓️ 15 Jan 2014 16:18:08Reported by mitreType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

CVE-2014-1201 Buffer overflow in INetViewX ActiveX control in Lorex Edge LH310 and Edge+ LH320 serie

Reporter	Title	Published	Views	Family All 10
exploitpack	Lorex LH300 Series - ActiveX Buffer Overflow (PoC)	18 Jan 201500:00	–	exploitpack
securityvulns	[CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow	14 Jan 201400:00	–	securityvulns
securityvulns	Lorex DVR ActiveX buffer overflow	14 Jan 201400:00	–	securityvulns
Cvelist	CVE-2014-1201	15 Jan 201416:00	–	cvelist
0day.today	Lorex LH300 Series - ActiveX Buffer Overflow (PoC) Exploit	26 Jan 201800:00	–	zdt
NVD	CVE-2014-1201	15 Jan 201416:08	–	nvd
Tenable Nessus	Lorex Technologies Edge Series Security DVR ActiveX Buffer Overflow	3 Feb 201400:00	–	nessus
Prion	Buffer overflow	15 Jan 201416:08	–	prion
Exploit DB	Lorex LH300 Series - ActiveX Buffer Overflow (PoC)	18 Jan 201500:00	–	exploitdb
d2	DSquare Exploit Pack: D2SEC_LOREX	15 Jan 201416:08	–	d2

Nvd

Node

lorex_technology edge_lh310_firmwareMatch7-35-28-1b26e

AND

lorextechnology edgeMatchlh310

Node

lorex_technology edge3_lh340_firmwareMatch11.19.85_1fe3a

AND

lorextechnology edge3Matchlh340

Node

lorex_technology edge2_lh330_firmwareMatch11.17.38-33_1d97a

AND

lorextechnology edge2Matchlh330

Node

lorex_technology edge\+_lh320_firmwareMatch7-35-28-1b26e

AND

lorextechnology edge\+Matchlh320

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/90223
github	www.github.com/pedrib/PoC/blob/master/lorexActivex/lorex-testcase.html
osvdb	www.osvdb.org/101903
securityfocus	www.securityfocus.com/archive/1/530739/100/0/threaded
github	www.github.com/pedrib/PoC/blob/master/lorexActivex/lorex-report.txt

Parameter	Position	Path	Description	CWE
HTTP_PORT	query param	/path/to/endpoint	Buffer overflow vulnerability in the INetViewX ActiveX control allows remote attackers to crash the service or execute arbitrary code via a long string.	CWE-119

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jan 2014 16:08Current

8High risk

Vulners AI Score8

CVSS210

EPSS0.2492

CWE-119