NetSight
IP …
critical10.0Public exploit code

CVE-2013-4977

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remot…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.

Affected products

VendorProductAffected versions
HikvisionDs-2cd7153-E Firmware
Version 4.1.0_b130111
HikvisionDs-2cd7153-E
All versions

Weakness classification

CWE-119

References