Remote Code Execution without authentication using stack overflow
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.9epss 0.7%
probabilidade de exploração
0.7%top 52% das CVEs
exploração observada
nãonenhuma fonte reporta
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H
Produtos afetados
Hanwha Vision Co., Ltd. · XRN-420S