← Back

CVE-2014-1201

nvd nist
Published: Jan 15, 2014Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.

Affected (8)

Lorex Technology
4 products
Edge Lh310 Firmware
Edge3 Lh340 Firmware
Edge2 Lh330 Firmware
Edge+ Lh320 Firmware
Lorextechnology
3 products
Edge+
Edge3
Edge2
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Edge Lh310 Firmware
Version 7-35-28-1b26e
Edge
Version lh310
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Edge3 Lh340 Firmware
Version 11.19.85_1fe3a
Edge3
Version lh340
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Edge2 Lh330 Firmware
Version 11.17.38-33_1d97a
Edge2
Version lh330
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Edge+ Lh320 Firmware
Version 7-35-28-1b26e
Edge+
Version lh320

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.