CVE-2017-16725

CVE	CVE-2017-16725
State	PUBLISHED
Assigner	icscert
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-12-20 19:29:00 UTC
Updated	2025-04-20 01:37:25 UTC
Description	A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.

Primary CVSS: v3.0 9.8 CRITICAL from [email protected]

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-119 | stack-based buffer overflow

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	9.8	CRITICAL	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
2.0	[email protected]	Primary	10		`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Xiongmaitech	Ahb7004t-h-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7004t-h-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7004t-mh-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7004t-mh-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7008f2-h	-	All	All	All
Operating System	Xiongmaitech	Ahb7008f2-h Firmware	4.02.r11.3070	All	All	All
Hardware	Xiongmaitech	Ahb7008f4-h	-	All	All	All
Operating System	Xiongmaitech	Ahb7008f4-h Firmware	4.02.r11.3070	All	All	All
Hardware	Xiongmaitech	Ahb7008f8-h	-	All	All	All
Operating System	Xiongmaitech	Ahb7008f8-h Firmware	4.02.r11.3070	All	All	All
Hardware	Xiongmaitech	Ahb7008t-h-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7008t-h-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7008t-lm-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7008t-lm-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7008t-mh-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7008t-mh-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7008t4-h-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7008t4-h-v2	_firmware	4.02.r11.7601	All	All
Operating System	Xiongmaitech	Ahb7008t4-h-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7016t-lm-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7016t-lm-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7016t-mh-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7016t-mh-v2 Firmware	4.02.r11.7601	All	All	All
Hardware	Xiongmaitech	Ahb7016t4-mh-v2	-	All	All	All
Operating System	Xiongmaitech	Ahb7016t4-mh-v2 Firmware	4.02.r11.7601	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	Xiongmai Technology IP Cameras And DVRs	affected Xiongmai Technology IP Cameras and DVRs	Not specified

Reference	Source	Link	Tags
Xiongmai IP Camera Module and DVR CVE-2017-16725 Stack Buffer Overflow Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
Xiongmai Technology IP Cameras and DVRs \| ICS-CERT	af854a3a-2127-422b-91ae-364da2661108	ics-cert.us-cert.gov	Third Party Advisory, US Government Resource
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.