PT-2021-17339 · Microsoft+1 · Internet Explorer+1

Published 2021-02-16 · Updated 2021-02-22 · CVE-2021-27232

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Pelco Digital Sentry Server version 7.18.72.11464

Description: The issue is related to a stack-based buffer overflow in the SetCameraConnectionParameter of the RTSPLive555.dll ActiveX control. This can be exploited by a remote attacker to potentially execute arbitrary code. The victim would have to visit a malicious webpage using Internet Explorer to trigger the exploit.

Recommendations: For Pelco Digital Sentry Server version 7.18.72.11464, consider disabling the SetCameraConnectionParameter function in the RTSPLive555.dll ActiveX control as a temporary workaround until a patch is available. Restrict access to the RTSPLive555.dll ActiveX control to minimize the risk of exploitation. Avoid using Internet Explorer to access webpages that could potentially trigger the exploit until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-27232

Affected Products

Internet Explorer

Pelco Digital Sentry Server

References · 5

• 🔥 https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server-RSTPLive555%20Activex%20Buffer%20overflow.txt · Exploit
• https://osv.dev/vulnerability/CVE-2021-27232 · Vendor Advisory
• https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27232 · Security Note
• https://t.me/cibsecurity/23649 · Telegram Post