PT-2024-7807 · Milestone Systems · Xprotect Device Pack

Published 2024-04-09 · Updated 2024-10-10 · CVE-2024-3506

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Siveillance Video (formerly Siveillance VMS) versions (affected versions not specified) XProtect Device Pack versions (affected versions not specified)

Description The issue is related to a buffer overflow vulnerability due to the lack of size checking for input data. This could allow a remote attacker to execute arbitrary code under certain conditions. The vulnerability may also enable an attacker with internal network access to execute commands on the Recording Server.

Recommendations For Siveillance Video (formerly Siveillance VMS), at the moment, there is no information about a newer version that contains a fix for this vulnerability. For XProtect Device Pack, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-09307

CVE-2024-3506

Affected Products

Xprotect Device Pack

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-3506 · Security Note
• https://bdu.fstec.ru/vul/2024-09307 · Security Note
• https://twitter.com/CVEnew/status/1843596478796718425 · Twitter Post
• https://vuldb.com/?id.279618 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-438590.pdf · Note
• https://t.me/cvedetector/7355 · Telegram Post
• https://t.me/cvenotify/97401 · Telegram Post
• https://vulners.com/cve/CVE-2024-3506 · Note
• https://supportcommunity.milestonesys.com/KBRedir?art=000065801&lang=en_US · Note