CVE-2014-1201

2014-01-1516:08:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-1201

buffer overflow

inetviewx

activex control

lorex edge

lh310

lh320

lh330

lh340

denial of service

remote code execution

nvd

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.695 Medium

EPSS

Percentile

98.0%

JSON

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.

CPENameOperatorVersion
lorex_technology:edge_lh310_firmwarelorex technology edge lh310 firmwareeq7-35-28-1b26e
lorextechnology:edgelorextechnology edgeeqlh310
lorex_technology:edge3_lh340_firmwarelorex technology edge3 lh340 firmwareeq11.19.85_1fe3a
lorextechnology:edge3lorextechnology edge3eqlh340
lorex_technology:edge2_lh330_firmwarelorex technology edge2 lh330 firmwareeq11.17.38-33_1d97a
lorextechnology:edge2lorextechnology edge2eqlh330
lorex_technology:edge\+_lh320_firmwarelorex technology edge\+ lh320 firmwareeq7-35-28-1b26e
lorextechnology:edge\+lorextechnology edge\+eqlh320

CPE	Name	Operator	Version
lorex_technology:edge_lh310_firmware	lorex technology edge lh310 firmware	eq	7-35-28-1b26e
lorextechnology:edge	lorextechnology edge	eq	lh310
lorex_technology:edge3_lh340_firmware	lorex technology edge3 lh340 firmware	eq	11.19.85_1fe3a
lorextechnology:edge3	lorextechnology edge3	eq	lh340
lorex_technology:edge2_lh330_firmware	lorex technology edge2 lh330 firmware	eq	11.17.38-33_1d97a
lorextechnology:edge2	lorextechnology edge2	eq	lh330
lorex_technology:edge\+_lh320_firmware	lorex technology edge\+ lh320 firmware	eq	7-35-28-1b26e
lorextechnology:edge\+	lorextechnology edge\+	eq	lh320