Lucene search

IcscertCVELIST:CVE-2021-32941

HistoryMay 23, 2022 - 6:51 p.m.

CVE-2021-32941 Annke Network Video Recorder - Stack-based Buffer Overflow

2022-05-2318:51:57

CWE-121

icscert

www.cve.org

annke n48pbb

network video recorder

buffer overflow

CVSS3

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

CNA Affected

[
  {
    "product": "N48PBB (NVR)",
    "vendor": "Annke",
    "versions": [
      {
        "lessThanOrEqual": "V3.4.106 build 200422",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-21-238-02

CVSS3

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

Related for CVELIST:CVE-2021-32941