CVEvulnerability

CVE-2024-3506

7.3 HIGH Published 2024-10-08 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-10-08
Last modified
2026-06-17
Assigner
cf45122d-9d50-442a-9b23-e05cde9943d8
CVSS 4.0 (cf45122d-9d50-442a-9b23-e05cde9943d8)
7.3 HIGH — CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (cf45122d-9d50-442a-9b23-e05cde9943d8)
6.7 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Weaknesses
CWE-120

Description

A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References