Lucene search
MitreCVE-2014-8756HistoryOct 17, 2014 - 3:55 p.m.
CVE-2014-8756
2014-10-1715:55:08
mitre
web.nvd.nist.gov
26
cve-2014-8756
ncrctl4.ncrnet.1
panasonic network camera recorder
remote code execution
security vulnerability
null bytes
getvolheader
crafted method call
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.052
Percentile
93.1%
The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote attackers to execute arbitrary code via a crafted GetVOLHeader method call, which writes null bytes to an arbitrary address.
Affected configurations
Node
panasonicnetwork_camera_recorder_firmwareRange<4.04r03
panasonicnetwork_camera_recorderMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| panasonic | network_camera_recorder_firmware | * | cpe:2.3:o:panasonic:network_camera_recorder_firmware:*:*:*:*:*:*:*:* |
| panasonic | network_camera_recorder | - | cpe:2.3:h:panasonic:network_camera_recorder:-:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-8756
2014-10-17 15:55:08
cvelist
cvelist
CVE-2014-8756
2014-10-17 15:00:00
zdi
zdi
prion
prion
Code injection
2014-10-17 15:55:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.052
Percentile
93.1%
Related for CVE-2014-8756