PT-2019-12709 · Hanwha Techwin · Hanwah Techwin Srn-472S+1

Published 2019-09-05 · Updated 2019-09-06 · CVE-2019-12223

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Hanwah Techwin SRN-472s version 1.07 190502 Hanwah Techwin SRN-x devices before 2019-05-03

Description A system crash and reboot can be achieved by submitting a long username in excess of 117 characters, triggering a buffer overflow in the main process controlling operation of the DVR system. This renders services unavailable during the reboot operation. Repeated attacks can affect availability as long as the attacker has network access to the device.

Recommendations For Hanwah Techwin SRN-472s version 1.07 190502, consider restricting access to the login functionality to minimize the risk of exploitation. For Hanwah Techwin SRN-x devices before 2019-05-03, avoid using long usernames until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2019-12223

Affected Products

Hanwah Techwin Srn-472S

Hanwah Techwin Srn-X

References · 6

• 🔥 https://gist.github.com/dustinnoe/66f91573a0080c9fb2c21819d8805a82 · Exploit
• 🔥 https://medium.com/@noe.dustin/samsung-webviewer-remote-dos-vulberability-cve-2019-12223-5f4afbc83fbd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-12223 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12223 · Vendor Advisory
• https://medium.com/%40noe.dustin/samsung-webviewer-remote-dos-vulberability-cve-2019-12223-5f4afbc83fbd · Note
• https://hanwha-security.com/en/products/video-recorder/nvr/ch4/SRN-472S/overview · Note