What is CVE-2024-3506?

CVE-2024-3506 is a medium-severity vulnerability in Milestone Systems Xprotect Vms, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.7/10. Published 2024-10-08.

How severe is CVE-2024-3506?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Buffer overflow in Milestone Systems Xprotect Vms

CVE-2024-3506

A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (12.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L.

Affected products

Milestone Systems Xprotect Vms — versions 0

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cf45122d-9d50-442a-9b23-e05cde9943d8

Frequently asked questions

What is CVE-2024-3506?: CVE-2024-3506 is a medium-severity vulnerability in Milestone Systems Xprotect Vms, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.7/10. Published 2024-10-08.
How severe is CVE-2024-3506?: Medium severity. CVSS v3 base score is 6.7 out of 10.