Octavio Gianatiempo

The issue affects certain EZVIZ products due to two stack buffer overflows in the `netClientSetWlanCfg` function of the EZVIZ SDK command server. This allows an authenticated attacker on the same local network as the camera to achieve remote code execution, enabling the execution of arbitrary code.

The issue is related to two stack-based buffer overflows in the `mulicast parse sadp packet` and `mulicast get pack type` functions of the SADP multicast protocol. This can allow an unauthenticated attacker present on the same local network as the camera to achieve remote code execution.

The SIP ALG function in Realtek eCos RSDK and MSDK has a stack-based buffer overflow that allows an attacker to remotely execute code without authentication via a crafted SIP packet containing malicious SDP data. This issue can be exploited by sending a specially crafted UDP packet, and it does not require user interaction or access to the admin interface. The vulnerability is notable for allowing attacks on devices with disabled web interface access from external networks. Potentially, millions of devices, from routers to signal amplifiers, are affected.