CVE-2019-12223
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device.
Affected (3)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.07_190502 |
| Running on/with | Platform Versions |
|---|---|
Hanwha Security Srn 472s | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2019-05-03 |
| Running on/with | Platform Versions |
|---|---|
Hanwha Security Srn 873s | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2019-05-03 |
| Running on/with | Platform Versions |
|---|---|
Hanwha Security Srn 1673s | All versions |
References (6)
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Product
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Timeline
No history available yet.