Buffer overflow

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the SDK issue...

Buffer overflow

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the PSIA issue...

Buffer overflow

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the ISAPI issue...

CVE-2015-4409

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the SDK issue...

CVE-2015-4407

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the PSIA issue...

CVE-2015-4408

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the ISAPI issue...

CVE-2015-4409

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the SDK issue...

CVE-2015-4407

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the PSIA issue...

CVE-2015-4408

The CVE-2015-4408 issue affects Hikvision NVR models DS-76xxNI-E1/2 and DS-77xxxNI-E4 prior to version 3.4.0. A buffer overflow in the ISAPI HTTP handling allows remote authenticated users to cause a denial of service (service interruption) by sending a crafted HTTP request. Impact is specificall...

CVE-2015-4408

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the ISAPI issue...

CVE-2015-4409

CVE-2015-4409 affects Hikvision NVR models DS-76xxNI-E1/2 and DS-77xxxNI-E4, with a buffer overflow in the HTTP/SDK handling that can be triggered by a crafted request. The issue allows remote authenticated users to cause a denial of service (service interruption). Affected versions are before 3....

CVE-2015-4407

CVE-2015-4407 affects Hikvision NVR models DS-76xxNI-E1/2 and DS-77xxxNI-E4. A buffer overflow in handling PSIA-enabled HTTP requests allows remote authenticated users to trigger a denial of service (service interruption). The vulnerability exists in devices prior to version 3.4.0; upgrading to 3...

Design/Logic Flaw

The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the...

CVE-2017-6342

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically lo...

Design/Logic Flaw

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically lo...

Security feature bypass

Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows...

CVE-2017-6342

Affected software/hardware: Dahua DHI-HCVR7216A-S3 devices (NVR firmware 3.210.0001.10, camera firmware 2.400.0000.28.R, SmartPSS 1.16.1). Vulnerability summary: When SmartPSS is launched and on the login screen, the background process logs in as admin, enabling sniffing of sensitive information ...

CVE-2017-6343

The vulnerability CVE-2017-6343 affects Dahua DHI-HCVR7216A-S3 devices and is realized via the web interface, enabling remote authentication bypass by using knowledge of the MD5 Admin Hash to gain login access without the password. Affected components include NVR firmware 3.210.0001.10, Camera fi...

CVE-2017-6342

An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically lo...

CVE-2017-6341

CVE-2017-6341 affects Dahua DHI-HCVR7216A-S3 devices (NVR 3.210.0001.10, Camera 2.400.0000.28.R, SmartPSS 1.16.1). The web/mobile/desktop interfaces return cleartext passwords in responses, enabling remote attackers to obtain sensitive data by sniffing the network. Related entries describe additi...