Hikvision DS-2CD7153-E IP Camera CVE-2013-4977 Remote Buffer Overflow Vulnerability

Bugtraq ID:	61642
Class:	Boundary Condition Error
CVE:	CVE-2013-4977
Remote:	Yes
Local:	No
Published:	Aug 06 2013 12:00AM
Updated:	Aug 06 2013 12:00AM
Credit:	Anibal Sacco
Vulnerable:	Hikvision Digital Technology DS-2CD7153-E 4.1.0 b130111
Not Vulnerable:

Hikvision DS-2CD7153-E IP Camera CVE-2013-4977 Remote Buffer Overflow Vulnerability

Hikvision DS-2CD7153-E IP camera is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code within the context of the affected device. Failed exploit attempts may result in a denial-of-service condition.

Hikvision DS-2CD7153-E IP camera running firmware 4.1.0 b130111 is vulnerable; other devices may also be affected.

Hikvision DS-2CD7153-E IP Camera CVE-2013-4977 Remote Buffer Overflow Vulnerability

An attacker can exploit this issue using readily available tools.

The following example data is available:

• /data/vulnerabilities/exploits/61642.py

Hikvision DS-2CD7153-E IP Camera CVE-2013-4977 Remote Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hikvision DS-2CD7153-E IP Camera CVE-2013-4977 Remote Buffer Overflow Vulnerability

References:

• Hikvision DS-2CD7153-E IP Camera Homepage (Hikvision Digital Technology)
  
• Hikvision IP Cameras Multiple Vulnerabilities (CORE)