Buffer overflow in Hanwha Vision Co., Ltd. Xrn-420s
CVE-2024-41882
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Vulnerability class: Buffer Overflow
EPSS: 0.008 (52.8th percentile) — read the EPSS interpretation.
Affected products
- Hanwha Vision Co., Ltd. Xrn-420s — versions 5.01.62 and prior versions
Weakness classification (CWE)
References
- fc9afe74-3f80-4fb7-a313-e6f036a89882 (vendor-advisory)