CVE-2021-34345

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346 Stack Based Overflow Vulnerability in NVR Storage Expansion

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346

A stack buffer overflow vulnerability in QNAP NVR Storage Expansion (pre-1.0.6) can allow remote arbitrary code execution. Fix: upgrade to NVR Storage Expansion 1.0.6 or later (2021-08-03). CVSS/metrics indicate network access, no authentication, and high impact to confidentiality, integrity, and...

CVE-2021-34345

CVE-2021-34345 affects QNAP NVR Storage Expansion: a stack buffer overflow in the NVR Storage Expansion component could allow arbitrary code execution. A fix was released in version 1.0.6 (and later) of NVR Storage Expansion.

CVE-2021-34345 Stack Based Overflow Vulnerability in NVR Storage Expansion

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34345: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

PT-2021-20466

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

PT-2021-20465

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNC_Ctrl.dll' Heap Buffer Overflow

Exploit Title: COMMAX UMS Client ActiveX Control 1.7.0.2 - 'CNCCtrl.dll' Heap Buffer Overflow Date: 02.08.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.commax.com COMMAX UMS Client ActiveX Control 1.7.0.2 CNCCtrl.dll Heap Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page:...

Annke Network Video Recorder

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Annke Equipment: N48PBB NVR Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a stack-based buffer overflow, which could allow an...

COMMAX WebViewer ActiveX Control 2.1.4.5 Buffer Overflow

COMMAX WebViewer ActiveX Control 2.1.4.5 CommaxWebViewer.ocx Buffer Overflow Vendor: COMMAX Co., Ltd. Prodcut web page: https://www.commax.com Affected version: 2.1.4.5 Summary: COMMAX activex web viewer client 32bit for COMMAX DVR/NVR. Desc: The vulnerability is caused due to a boundary error in...

Weak password vulnerability in NVMS-1000 of Shenzhen Tongwei Digital Technology Co.

NVMS-1000 is a video surveillance management software launched by Shenzhen Tongwei Digital Technology Co., Ltd, which can be used with DVR, NVR, IPC, DVS, decoder and so on. Shenzhen Tongwei Digital Technology Co., Ltd NVMS-1000 suffers from a weak password vulnerability, which can be exploited b...

Weak Password Vulnerability in GW Security NVR Series Network Camera NVRs

The NVR series is a network camera from GW Security. A weak password vulnerability exists in the GW Security NVR Series network camera NVR, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in INFINOVA NVR of Shenzhen Infinova Technology Co.

Infinova is a leading global manufacturer of electronic security products and an industry solutions provider. Ltd. INFINOVA NVR has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Shenzhen Infinova Technology Co., Ltd. INFINOVA NVR presence command execution

Infinova is a leading global manufacturer of electronic security products and an industry solutions provider. INFINOVA NVR of Shenzhen Infinova Technology Co., Ltd. suffers from command execution, which can be exploited by an attacker to gain control of the server...

Johnson Controls Exacq Technologies exacqVision

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Exacq Technologies, Inc., a subsidiary of Johnson Controls, Inc. Equipment: exacqVision Vulnerability: Off-by-one Error 2. RISK EVALUATION A local attacker could exploit this vulnerability to obtain “Super User” access to the underlying Ubuntu Linux...