CVE-2024-52544CWE-121

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

Critical · published December 3, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker can unleash chaos by triggering a stack-based buffer overflow in the DP Service on TCP port 3500! 🔥 Think of this vulnerability like a sneaky delivery person who finds a hidden side entrance to your building and fills your office with overflowing packages — if they know just where to look, trouble is inevitable! An attacker could exploit this vulnerability to gain control of the device, potentially leading to complete system compromise. Imagine them navigating your infrastructure freely, accessing sensitive data, and causing absolute havoc — it's a nightmare scenario!

Put simply

Think of this vulnerability like a sneaky delivery person who finds a hidden side entrance to your building and fills your office with overflowing packages — if they know just where to look, trouble is inevitable! This critical vulnerability allows an unauthenticated attacker to trigger a stack-based buffer overflow, resulting in the possibility of executing arbitrary code on the affected device.

What to do

An attacker could exploit this vulnerability to gain control of the device, potentially leading to complete system compromise. Imagine them navigating your infrastructure freely, accessing sensitive data, and causing absolute havoc — it's a nightmare scenario! To protect yourself and your systems, patch immediately to firmware version 2.800.000000000.8.R.20241111. Additionally, review your network configurations to limit access to TCP port 3500 as part of your defense in depth strategy. It's time to fortify those defenses! You've got this! With these steps, you'll be back in control in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-12-03T17:18Z
EPSS history
Timeline
  • 03 DEC 17:18Z
    Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
    cvelistv5