CVE-2024-52544

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

CVSS 9.8 CRITICALEPSS 1.1%CWE-121

Vexday Risk Score

48Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 1.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

03 Dec 2024Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Lorex · 2K Indoor Wi-Fi Security Camera

public PoCs found — 1

cve_referencegithub.com/sfewer-r7/LorexExploitunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/sfewer-r7/LorexExploit https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/