Lucene search
CertccCVE-2014-4880HistoryDec 08, 2014 - 11:59 a.m.
CVE-2014-4880
2014-12-0811:59:07
CWE-119
certcc
web.nvd.nist.gov
54
cve-2014-4880
buffer overflow
hikvision dvr
ds-7204
firmware
remote code execution
rtsp play
authorization header
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.956
Percentile
99.5%
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.
Affected configurations
Node
hikvisiondvr_ds-7204_firmwareMatch2.2.10build_131009
hikvisiondvr_ds-7204Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hikvision | dvr_ds-7204_firmware | 2.2.10 | cpe:2.3:o:hikvision:dvr_ds-7204_firmware:2.2.10:build_131009:*:*:*:*:*:* |
| hikvision | dvr_ds-7204 | - | cpe:2.3:h:hikvision:dvr_ds-7204:-:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
Hikvision DVR Basic Authentication Buffer Overflow (CVE-2014-4880)
2014-12-25 00:00:00
zdt
zdt
Hikvision DVR RTSP Request Remote Code Execution Exploit
2014-11-20 00:00:00
packetstorm
packetstorm
Hikvision DVR RTSP Request Remote Code Execution
2014-11-20 00:00:00
metasploit
metasploit
Hikvision DVR RTSP Request Remote Code Execution
2014-11-19 20:07:02
nvd
nvd
CVE-2014-4880
2014-12-08 11:59:07
cvelist
cvelist
CVE-2014-4880
2014-12-08 11:00:00
exploitdb
exploitdb
Hikvision DVR - RTSP Request Remote Code Execution (Metasploit)
2014-11-24 00:00:00
prion
prion
Buffer overflow
2014-12-08 11:59:00
nessus
nessus
Hikvision DVRs Devices Buffer Overflow (CVE-2014-4879)
2024-07-22 00:00:00
Hikvision DVRs Devices Buffer Overflow (CVE-2014-4880)
2024-07-22 00:00:00
Hikvision DVRs Devices Buffer Overflow (CVE-2014-4878)
2024-07-22 00:00:00
threatpost
threatpost
Remote Code Execution in Popular Hikvision Surveillance DVR
2014-11-24 12:48:56
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.956
Percentile
99.5%
Related for CVE-2014-4880