CVE-2024-52544

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111

Description: An unauthenticated attacker can trigger a stack-based buffer overflow in the DP Service (TCP port 3500). This issue can potentially allow a remote attacker to elevate their privileges to the root level and gain full access to the device. The vulnerability is related to a buffer overflow in the memory, which can be exploited by an attacker to gain control.

Recommendations: For versions prior to 2.800.0000000.8.R.20241111, update the firmware to version 2.800.0000000.8.R.20241111 to resolve the issue. As a temporary workaround, consider restricting access to the DP Service on TCP port 3500 to minimize the risk of exploitation.