Buffer overflow in Lorex Technology Edge2 Lh330 Firmware
CVE-2014-1201
Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.
Vulnerability class: Buffer Overflow
EPSS: 0.295 (98.0th percentile) — read the EPSS interpretation.
Affected products
- Lorex_technology Edge2_lh330_firmware — versions 11.17.38-33_1d97a
- Lorex_technology Edge3_lh340_firmware — versions 11.19.85_1fe3a
- Lorex_technology Edge_lh310_firmware — versions 7-35-28-1b26e
- Lorex_technology Edge\+_lh320_firmware — versions 7-35-28-1b26e
- Lorextechnology Edge — versions lh310
- Lorextechnology Edge\+ — versions lh320
- Lorextechnology Edge2 — versions lh330
- Lorextechnology Edge3 — versions lh340
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)