PT-2021-9810 · Victure · Victure Pc420

Bitdefender Labs · Published 2021-08-30 · Updated 2021-09-28 · CVE-2020-15744

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Victure PC420 firmware versions prior to 1.2.2

Description A Stack-based Buffer Overflow issue in the ONVIF server component of the Victure PC420 smart camera allows an attacker to execute remote code on the target device.

Recommendations For Victure PC420 firmware versions prior to 1.2.2, update to a version newer than 1.2.2 to resolve the issue. As a temporary workaround, consider disabling the ONVIF server component until a patch is available.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

CVE-2020-15744

Affected Products

Victure Pc420

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-15744 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15744 · Vendor Advisory
• https://t.me/cvenotify/20352 · Telegram Post
• https://t.me/cvenotify/20643 · Telegram Post
• https://t.me/cybersecuritytechnologies/4395 · Telegram Post
• https://bitdefender.com/blog/labs/cracking-the-victure-pc420-camera · Note