CVEvulnerability

CVE-2017-16725

9.8 CRITICAL Published 2017-12-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.

Affected configurations

• xiongmaitech ahb7008f8-h firmware 4.02.r11.3070 • xiongmaitech ahb7008f4-h firmware 4.02.r11.3070 • xiongmaitech ahb7008f2-h firmware 4.02.r11.3070 • xiongmaitech ahb7008t-mh-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-mh-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-h-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7016t-lm-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-lm-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7016t4-mh-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7016t-mh-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7008t4-h-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-h-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7008t4-h-v2 firmware • xiongmaitech ahb7032f8-lm-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7032f4-lm-v2 firmware 4.02.r11.7601 • xiongmaitech ahb7808r-ms-v3 firmware 4.02.r11.nat.onvifc.20170327 • xiongmaitech ahb7804r-ms-v3 firmware 4.02.r11.nat.onvifc.20170327 • xiongmaitech ahb7016t-lm-v3 firmware 4.02.r11.3070 • xiongmaitech ahb7008t-lm-v3 firmware 4.02.r11.3070 • xiongmaitech ahb7004t-lm-v3 firmware 4.02.r11.3070 • xiongmaitech ahb7016t4-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7016t-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7016t-mh-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-mh-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-mh-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-gl-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-gl-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-g-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7016f8-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7016f8-gl-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7016f4-gl-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7016f2-gl-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7808r-lm-v3 firmware 4.02.r11.nat.onvifc.20171120 • xiongmaitech ahb7804r-lm-v3 firmware 4.02.r11.nat.onvifc.20171120 • xiongmaitech ahb7804r-lms-v3 firmware 4.02.r11.nat.onvifc.20171019 • xiongmaitech ahb7008f8-g-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7008f4-g-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7008f2-g-v4 firmware 4.02.r11.7601 • xiongmaitech ahb7032f4-lm-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7032f2-lm-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7032f8-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7032f4-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7032f2-gs-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7016t-lme-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7008t-lme-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7004t-lme-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7808r-mh-v3 firmware 4.02.r11.7601 • xiongmaitech ahb7804r-mh-v3 firmware 4.02.r11.7601 • xiongmaitech ipg-50h10pl-p firmware • xiongmaitech ipg-50h10pl-b firmware • xiongmaitech ipg-50h10pl-ae firmware • xiongmaitech ipg-50h10pl-s firmware • xiongmaitech ipg-52h10pl-p firmware • xiongmaitech ipg-52h10pl-b firmware • xiongmaitech ipg-53h13pet-s firmware • xiongmaitech ipg-53h13pls-s firmware • xiongmaitech ipg-53h13pes-s firmware • xiongmaitech ipg-53h13pes-sl firmware … and 76 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References