PT-2020-14736 · Acti · Acti Nvr3 Standard Server

Megamagnus · Published 2020-08-04 · Updated 2020-08-06 · CVE-2020-15956

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ACTi NVR3 Standard Server version 3.0.12.42

Description The issue allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload.

Recommendations For ACTi NVR3 Standard Server version 3.0.12.42, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-15956

Affected Products

Acti Nvr3 Standard Server

References · 6

• 🔥 https://github.com/megamagnus/cve-2020-15956 · Exploit
• 🔥 https://exploit-db.com/exploits/48731 · Exploit
• 🔥 http://packetstormsecurity.com/files/158771/ACTi-NVR3-Standard-Professional-Server-3.0.12.42-Denial-Of-Service.html · Exploit
• https://www2.acti.com/nvr3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15956 · Security Note