PT-2026-27768 · Lsc · Lsc Smart Indoor Ip Camera

Published 2026-03-25 · Updated 2026-03-25 · CVE-2024-51347

Positive Technologies · (AI Summary)

CVSS v3.1

7.2

High

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LSC Smart Indoor IP Camera version 7.6.32

Description A buffer overflow issue exists in the dgiot binary of the LSC Smart Indoor IP Camera. The problem is due to improper length validation of the Time Zone (TZ) parameter when handling ONVIF configuration requests. Specifically, the strcpy function is used to copy the TZ parameter into a fixed-size buffer without checking its length, which can lead to a buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-51347

Affected Products

Lsc Smart Indoor Ip Camera

References · 4

• 🔥 https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51347 · Security Note
• https://twitter.com/VulmonFeeds/status/2036754226483765273 · Twitter Post
• https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/tree/main · Note