CVE-2021-27232

Name of the Vulnerable Software and Affected Versions: Pelco Digital Sentry Server version 7.18.72.11464

Description: The issue is related to a stack-based buffer overflow in the SetCameraConnectionParameter of the RTSPLive555.dll ActiveX control. This can be exploited by a remote attacker to potentially execute arbitrary code. The victim would have to visit a malicious webpage using Internet Explorer to trigger the exploit.

Recommendations: For Pelco Digital Sentry Server version 7.18.72.11464, consider disabling the SetCameraConnectionParameter function in the RTSPLive555.dll ActiveX control as a temporary workaround until a patch is available. Restrict access to the RTSPLive555.dll ActiveX control to minimize the risk of exploitation. Avoid using Internet Explorer to access webpages that could potentially trigger the exploit until the issue is resolved.