PT-2022-9432
CVE-2021-23851
·
Published
2022-03-30
·
Updated
2022-04-08
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Camera recovery image (affected versions not specified)
Description
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash and potentially lead to a buffer overflow, enabling remote code execution. The recovery image can only be accessed with administrative rights or physical access to the camera, allowing the upload of new firmware in case of damaged firmware.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾