CVE-2014-8756

2014-10-1715:55:08

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.052

Percentile

93.1%

JSON

The NcrCtl4.NcrNet.1 control in Panasonic Network Camera Recorder before 4.04R03 allows remote attackers to execute arbitrary code via a crafted GetVOLHeader method call, which writes null bytes to an arbitrary address.

Affected configurations

Nvd

Node

panasonicnetwork_camera_recorder_firmwareRange<4.04r03

AND

panasonicnetwork_camera_recorderMatch-

VendorProductVersionCPE
panasonicnetwork_camera_recorder_firmware*cpe:2.3:o:panasonic:network_camera_recorder_firmware:*:*:*:*:*:*:*:*
panasonicnetwork_camera_recorder-cpe:2.3:h:panasonic:network_camera_recorder:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
panasonic	network_camera_recorder_firmware	*	cpe:2.3:o:panasonic:network_camera_recorder_firmware::::::::
panasonic	network_camera_recorder	-	cpe:2.3:h:panasonic:network_camera_recorder:-:::::::*