Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:CHikvision Ds 2cd7153 E
HWHikvisionall versionsHikvision Ds 2cd7153 E Firmware
OSHikvision4.1.0_b130111
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDoSMemory
CWE
References
Related vulnerabilities
CVE-2013-4976CRITICAL9.8PL ✓same product
Hikvision DS-2CD7153-E — pominięcie uwierzytelnienia przez hardcoded credentials
CVE-2013-4975HIGH8.8same product
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVE-2021-36260CRITICAL9.8⚠ KEVPL ✓same vendor
Command injection w serwerze WWW kamer Hikvision (nieautoryzowany RCE)
CVE-2017-7921CRITICAL9.8⚠ KEVPL ✓same vendor
Hikvision IP Camera — ominięcie uwierzytelnienia (Auth Bypass)
CVE-2023-28812CRITICAL9.1PL ✓same vendor
Buffer overflow w wtyczce przeglądarki Hikvision LocalServiceComponents