PT-2019-19791 · Dahua · Dahua

Publicado 2019-09-18 · Atualizado 2019-09-19 · CVE-2019-9677

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dahua products versions prior to August 18, 2019

Description The issue concerns a buffer overflow that can be triggered by an attacker constructing malicious packets due to insufficient verification of specific fields in the CGI interface of certain Dahua products.

Recommendations For versions prior to August 18, 2019, update the firmware to a version released after August 18, 2019, to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2019-9677

Produtos afetados

Dahua

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-9677 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9677 · Aviso do Fabricante
• https://dahuasecurity.com/support/cybersecurity/details/637 · Aviso do Fabricante