Buffer overflow in Lorex Technology Edge2 Lh330 Firmware
CVE-2014-1201
Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.295 (98.1th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.295 · newest: 0.295 · change: 0.000
Affected products
- Lorex Technology Edge2 Lh330 Firmware — versions 11.17.38-33_1d97a
- Lorex Technology Edge3 Lh340 Firmware — versions 11.19.85_1fe3a
- Lorex Technology Edge Lh310 Firmware — versions 7-35-28-1b26e
- Lorex Technology Edge\+ Lh320 Firmware — versions 7-35-28-1b26e
- Lorextechnology Edge — versions lh310
- Lorextechnology Edge\+ — versions lh320
- Lorextechnology Edge2 — versions lh330
- Lorextechnology Edge3 — versions lh340