Lucene search

HikvisionCVELIST:CVE-2024-29948

HistoryApr 02, 2024 - 11:07 a.m.

CVE-2024-29948

2024-04-0211:07:04

hikvision

www.cve.org

hikvision nvrs

out-of-bounds read

vulnerability

authenticated attacker

specially crafted messages

service abnormality

CVSS3

3.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

AI Score

4.4

Confidence

High

EPSS

Percentile

9.0%

JSON

There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulnerability by sending specially crafted messages to a vulnerable device, causing a service abnormality.

CNA Affected

[
  {
    "vendor": "Hikvision",
    "product": "DS-7604NXI-K1/4P",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "V4.76.005 build231012 and the versions prior to it",
        "status": "affected"
      }
    ]
  }
]

References

www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices/

CVSS3

3.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L

AI Score

4.4

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-29948