Buffer overflow

2022-03-3016:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

CPENameOperatorVersion
autodome_7000_firmwareeq4.0.0-cpp
autodome_ip_4000_hd_firmwareeq4.0.0-cpp
autodome_ip_4000i_firmwareeq7.3.0-cpp
autodome_ip_5000_hd_firmwareeq4.0.0-cpp
autodome_ip_5000_ir_firmwareeq4.0.0-cpp
autodome_ip_5000i_firmwareeq7.3.0-cpp
autodome_ip_starlight_5000i_firmwareeq7.3.0-cpp
autodome_ip_starlight_7000i_firmwareeq7.3.0-cpp
aviotec_ip_starlight_8000_firmwareeq6.0.0-cpp
dinion_hd_1080p_firmwareeq4.0.0-cpp

Name	Operator	Version
autodome_7000_firmware	eq	4.0.0-cpp
autodome_ip_4000_hd_firmware	eq	4.0.0-cpp
autodome_ip_4000i_firmware	eq	7.3.0-cpp
autodome_ip_5000_hd_firmware	eq	4.0.0-cpp
autodome_ip_5000_ir_firmware	eq	4.0.0-cpp
autodome_ip_5000i_firmware	eq	7.3.0-cpp
autodome_ip_starlight_5000i_firmware	eq	7.3.0-cpp
autodome_ip_starlight_7000i_firmware	eq	7.3.0-cpp
aviotec_ip_starlight_8000_firmware	eq	6.0.0-cpp
dinion_hd_1080p_firmware	eq	4.0.0-cpp