The vulnerability of the DoShellCmd() function in the ActionD daemon of the Avtech microprogramming system for IP cameras and digital/network video recorders allows a violator to execute arbitrary code.

The vulnerability of the DoShellCmd function in the ActionD daemon of Avtech’s microprogramming software for IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the strCmd parameter. Exploiting this vulnerability allows a remote...