PT-2021-11087 · Ambarella · Ambarella Oryx Rtsp Server+1

Published 2021-04-30 · Updated 2024-09-06 · CVE-2020-24918

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ambarella Oryx RTSP Server version 2020-01-07

Description: A buffer overflow issue exists in the RTSP service, allowing an unauthenticated attacker to send a crafted RTSP request with a long digest authentication header. This can lead to the execution of arbitrary code in the parse authentication header() function in libamprotocol-rtsp.so.1 within rtsp svc, or cause a crash, potentially enabling remote takeover of devices such as the Furbo Dog Camera.

Recommendations: For Ambarella Oryx RTSP Server version 2020-01-07, consider disabling the RTSP service until a patch is available, as it is emphasized by the vendor to be for DEMO purposes only and not intended for use in production products. Restrict access to the parse authentication header() function to minimize the risk of exploitation. Avoid using the RTSP library in production environments, adhering to the vendor's guidelines that it should not be used in products.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-24918

Affected Products

Ambarella Oryx Rtsp Server

Libamprotocol-Rtsp.So.1

References · 6

• 🔥 https://github.com/Ambarella-Inc/amba-cve-info/tree/main/cve-2020-24918 · Exploit
• 🔥 https://somersetrecon.squarespace.com/blog/2021/hacking-the-furbo-part-1 · Exploit
• 🔥 https://somersetrecon.com/blog · Exploit
• https://ambarella.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24918 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24918 · Vendor Advisory