CVE-2019-25063

CVE-2019-25063 affects Sricam IP CCTV Camera, specifically the Device Viewer component. The root cause is memory corruption arising from an issue in an unknown function within Device Viewer, with exploitation requiring local access. Reported severity is critical, and multiple sources (NVD, Red Ha...

CVE-2019-25062

The CVE-2019-25062 issue affects Sricam IP CCTV Camera, specifically the Device Viewer component. The connected sources describe a memory corruption vulnerability caused by a stack-based/out-of-bounds condition, enabling local exploitation. The vulnerability is rated high across multiple database...

CVE-2019-25435

CVE-2019-25435 affects Sricam DeviceViewer 3.12.0.1. The issue is a local, stack‑based buffer overflow in the User Management → Add User function. An attacker with authenticated access can bypass DEP and inject a payload via the Username field to execute arbitrary code through a ROP chain. The re...

CVE-2019-25436

CVE-2019-25436 affects Sricam DeviceViewer 3.12.0.1. The vulnerability is a password change security bypass where authenticated users can change passwords without validating the old password; attackers can inject a large payload into the old password parameter during the change password process t...