A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HXiongmaitech Ahb80n16t Gs
HWXiongmaitechall versionsXiongmaitech Ahb80n16t Gs Firmware
OSXiongmaitech4.03.r11.7601.nat.onvifc.20211223Xiongmaitech Ahb80n32f4 Lme
HWXiongmaitechall versionsXiongmaitech Ahb80n32f4 Lme Firmware
OSXiongmaitech4.03.r11.7601.nat.onvifc.20211228Xiongmaitech Ahb80x04r Mh
HWXiongmaitechall versionsXiongmaitech Ahb80x04r Mh Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210729Xiongmaitech Ahb80x04r Mh V2
HWXiongmaitechall versionsXiongmaitech Ahb80x04r Mh V2 Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210729Xiongmaitech Ahb80x04 R Mh V3
HWXiongmaitechall versionsXiongmaitech Ahb80x04 R Mh V3 Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210729Xiongmaitech Nbd80x08s Kl
HWXiongmaitechall versionsXiongmaitech Nbd80x08s Kl Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210727Xiongmaitech Nbd80x09ra Kl
HWXiongmaitechall versionsXiongmaitech Nbd80x09ra Kl Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210727Xiongmaitech Nbd80x09s Kl
HWXiongmaitechall versionsXiongmaitech Nbd80x09s Kl Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210727Xiongmaitech Nbd80x16s Kl
HWXiongmaitechall versionsXiongmaitech Nbd80x16s Kl Firmware
OSXiongmaitech4.03.r11.nat.dss.onvifc.20210727Xiongmaitech Nbd90s0vt Qw
HWXiongmaitechall versionsXiongmaitech Nbd90s0vt Qw Firmware
OSXiongmaitech4.03.r11.713g.nat.onvifc.2021
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
Related vulnerabilities
CVE-2022-45045HIGH8.8same product
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02....
CVE-2025-65856CRITICAL9.8PL ✓same vendor
Authentication bypass w kamerach IP Xiongmai XM530 — dostęp bez uwierzytelnienia
CVE-2022-45460CRITICAL9.8PL ✓same vendor
Stack-based buffer overflow w urządzeniach NVR Xiongmai — RCE bez uwierzytelnienia
CVE-2021-41506CRITICAL9.8PL ✓same vendor
Backdoor w firmware urządzeń Xiongmai — statyczne dane konta root
CVE-2020-22253CRITICAL9.8PL ✓same vendor
Xiongmai Technology: otwarty port 9530 umożliwia nieautoryzowany dostęp Telnet