CVE-2024-51347

Name of the Vulnerable Software and Affected Versions LSC Smart Indoor IP Camera version 7.6.32

Description A buffer overflow issue exists in the dgiot binary of the LSC Smart Indoor IP Camera. The problem is due to improper length validation of the Time Zone (TZ) parameter when handling ONVIF configuration requests. Specifically, the strcpy function is used to copy the TZ parameter into a fixed-size buffer without checking its length, which can lead to a buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.