CVEvulnerability

CVE-2023-6095

8.9 HIGH Published 2024-04-26 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-04-26
Last modified
2026-06-17
Assigner
fc9afe74-3f80-4fb7-a313-e6f036a89882
CVSS 3.1 (fc9afe74-3f80-4fb7-a313-e6f036a89882)
8.9 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H
Weaknesses
CWE-121

Description

Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Related

Weakness · CWE (1)

  • CWE-121 Stack-based Buffer Overflow weakness

References