CVE-2014-8756

Name of the Vulnerable Software and Affected Versions Panasonic Network Camera Recorder versions prior to 4.04R03

Description The issue allows remote attackers to execute arbitrary code via a crafted GetVOLHeader method call, which writes null bytes to an arbitrary address. This is related to the NcrCtl4.NcrNet.1 control in the Panasonic Network Camera Recorder.

Recommendations For versions prior to 4.04R03, update to version 4.04R03 or later to resolve the issue. As a temporary workaround, consider restricting access to the GetVOLHeader method until a patch is applied.