CVE-2024-3506CWE-120
Camera Driver possible Buffer Overflow
High · published October 8, 2024
What it is
A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.
The record
Technical detail
- CVSS v4.0
- 7.3 · HIGH
- Vector
- CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L
- EPSS
- 0.00232 · 13.2th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2024-10-08T10:00Z
EPSS history
Timeline