PT-2023-26771 · Unknown · Nbd80S09S-Klc+1

CVE-2023-39068

·

Publicado

2023-09-11

·

Atualizado

2023-09-14

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions NBD80S09S-KLC version YK HZXM NBD80S09S-KLC V4.03.R11.7601.Nat.OnvifC.20230414.bin NBD80N32RA-KL-V3 version YK HZXM NBD80N32RA-KL V4.03.R11.7601.Nat.OnvifC.20220120.bin
Description A Buffer Overflow issue allows a remote attacker to cause a denial of service via a crafted request to the service.XM component.
Recommendations For NBD80S09S-KLC version YK HZXM NBD80S09S-KLC V4.03.R11.7601.Nat.OnvifC.20230414.bin, consider disabling the service.XM component until a patch is available. For NBD80N32RA-KL-V3 version YK HZXM NBD80N32RA-KL V4.03.R11.7601.Nat.OnvifC.20220120.bin, consider disabling the service.XM component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2023-39068

Produtos afetados

Nbd80N32Ra-Kl-V3
Nbd80S09S-Klc