PT-2022-17747 · Xiongmai · Xiongmai Dvr Devices Ahb80N32F4-Lme+8

Chris Leech · Published 2022-03-28 · Updated 2022-04-04 · CVE-2022-26259

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xiongmai DVR devices NBD80X16S-KL Xiongmai DVR devices NBD80X09S-KL Xiongmai DVR devices NBD80X08S-KL Xiongmai DVR devices NBD80X09RA-KL Xiongmai DVR devices AHB80X04R-MH Xiongmai DVR devices AHB80X04R-MH-V2 Xiongmai DVR devices AHB80X04-R-MH-V3 Xiongmai DVR devices AHB80N16T-GS Xiongmai DVR devices AHB80N32F4-LME Xiongmai DVR devices NBD90S0VT-QW

Description A buffer overflow in Xiongmai DVR devices allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.

Recommendations For Xiongmai DVR devices NBD80X16S-KL, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices NBD80X09S-KL, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices NBD80X08S-KL, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices NBD80X09RA-KL, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices AHB80X04R-MH, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices AHB80X04R-MH-V2, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices AHB80X04-R-MH-V3, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices AHB80N16T-GS, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices AHB80N32F4-LME, consider disabling the RSTP request functionality until a patch is available. For Xiongmai DVR devices NBD90S0VT-QW, consider disabling the RSTP request functionality until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-26259

Affected Products

Xiongmai Dvr Devices Ahb80N16T-Gs

Xiongmai Dvr Devices Ahb80N32F4-Lme

Xiongmai Dvr Devices Ahb80X04-R-Mh-V3

Xiongmai Dvr Devices Ahb80X04R-Mh

Xiongmai Dvr Devices Ahb80X04R-Mh-V2

Xiongmai Dvr Devices Nbd80X08S-Kl

Xiongmai Dvr Devices Nbd80X09Ra-Kl

Xiongmai Dvr Devices Nbd80X16S-Kl

Xiongmai Dvr Devices Nbd90S0Vt-Qw

References · 6

• 🔥 https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs · Exploit
• https://xiongmaitech.com/en/index.php/service/notice_info/51/2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26259 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26259 · Vendor Advisory
• https://t.me/cvenotify/28427 · Telegram Post
• https://t.me/cibsecurity/39626 · Telegram Post