critical9.8
CVE-2017-16725
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface.
Impact
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xiongmaitech | Ahb7008f8-H Firmware | Version 4.02.r11.3070 |
| Xiongmaitech | Ahb7008f4-H Firmware | Version 4.02.r11.3070 |
| Xiongmaitech | Ahb7008f2-H Firmware | Version 4.02.r11.3070 |
| Xiongmaitech | Ahb7008t-Mh-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7004t-Mh-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7004t-H-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7016t-Lm-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7008t-Lm-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7016t4-Mh-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7016t-Mh-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7008t4-H-V2 Firmware | Version 4.02.r11.7601 |
| Xiongmaitech | Ahb7008t-H-V2 Firmware | Version 4.02.r11.7601 |