CVE-2017-16725

Critical

Description

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.

SeverityCritical
CVSS9.8
Exploit probability95. percentile9.2%
ProductXiongmaitech Ahb7008f8-h Firmware
PublishedDec 20, 2017
First seenDec 20, 2017

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
xiongmaitech ahb7008f8-h_firmware4.02.r11.3070—
xiongmaitech ahb7008f4-h_firmware4.02.r11.3070—
xiongmaitech ahb7008f2-h_firmware4.02.r11.3070—
xiongmaitech ahb7008t-mh-v2_firmware4.02.r11.7601—
xiongmaitech ahb7004t-mh-v2_firmware4.02.r11.7601—
xiongmaitech ahb7004t-h-v2_firmware4.02.r11.7601—
xiongmaitech ahb7016t-lm-v2_firmware4.02.r11.7601—
xiongmaitech ahb7008t-lm-v2_firmware4.02.r11.7601—
xiongmaitech ahb7016t4-mh-v2_firmware4.02.r11.7601—
xiongmaitech ahb7016t-mh-v2_firmware4.02.r11.7601—
xiongmaitech ahb7008t4-h-v2_firmware4.02.r11.7601—
xiongmaitech ahb7008t-h-v2_firmware4.02.r11.7601—
xiongmaitech ahb7008t4-h-v2_firmware—
xiongmaitech ahb7032f8-lm-v2_firmware4.02.r11.7601—
xiongmaitech ahb7032f4-lm-v2_firmware4.02.r11.7601—
xiongmaitech ahb7808r-ms-v3_firmware4.02.r11.nat.onvifc.20170327—
xiongmaitech ahb7804r-ms-v3_firmware4.02.r11.nat.onvifc.20170327—
xiongmaitech ahb7016t-lm-v3_firmware4.02.r11.3070—
xiongmaitech ahb7008t-lm-v3_firmware4.02.r11.3070—
xiongmaitech ahb7004t-lm-v3_firmware4.02.r11.3070—
xiongmaitech ahb7016t4-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7016t-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7008t-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7004t-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7016t-mh-v3_firmware4.02.r11.7601—
xiongmaitech ahb7008t-mh-v3_firmware4.02.r11.7601—
xiongmaitech ahb7004t-mh-v3_firmware4.02.r11.7601—
xiongmaitech ahb7008t-gl-v4_firmware4.02.r11.7601—
xiongmaitech ahb7004t-gl-v4_firmware4.02.r11.7601—
xiongmaitech ahb7004t-g-v4_firmware4.02.r11.7601—
xiongmaitech ahb7016f8-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7016f8-gl-v4_firmware4.02.r11.7601—
xiongmaitech ahb7016f4-gl-v4_firmware4.02.r11.7601—
xiongmaitech ahb7016f2-gl-v4_firmware4.02.r11.7601—
xiongmaitech ahb7808r-lm-v3_firmware4.02.r11.nat.onvifc.20171120—
xiongmaitech ahb7804r-lm-v3_firmware4.02.r11.nat.onvifc.20171120—
xiongmaitech ahb7804r-lms-v3_firmware4.02.r11.nat.onvifc.20171019—
xiongmaitech ahb7008f8-g-v4_firmware4.02.r11.7601—
xiongmaitech ahb7008f4-g-v4_firmware4.02.r11.7601—
xiongmaitech ahb7008f2-g-v4_firmware4.02.r11.7601—
xiongmaitech ahb7032f4-lm-v3_firmware4.02.r11.7601—
xiongmaitech ahb7032f2-lm-v3_firmware4.02.r11.7601—
xiongmaitech ahb7032f8-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7032f4-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7032f2-gs-v3_firmware4.02.r11.7601—
xiongmaitech ahb7016t-lme-v3_firmware4.02.r11.7601—
xiongmaitech ahb7008t-lme-v3_firmware4.02.r11.7601—
xiongmaitech ahb7004t-lme-v3_firmware4.02.r11.7601—
xiongmaitech ahb7808r-mh-v3_firmware4.02.r11.7601—
xiongmaitech ahb7804r-mh-v3_firmware4.02.r11.7601—
xiongmaitech ipg-50h10pl-p_firmwareNo range specified—
xiongmaitech ipg-50h10pl-b_firmwareNo range specified—
xiongmaitech ipg-50h10pl-ae_firmwareNo range specified—
xiongmaitech ipg-50h10pl-s_firmwareNo range specified—
xiongmaitech ipg-52h10pl-p_firmwareNo range specified—
xiongmaitech ipg-52h10pl-b_firmwareNo range specified—
xiongmaitech ipg-53h13pet-s_firmwareNo range specified—
xiongmaitech ipg-53h13pls-s_firmwareNo range specified—
xiongmaitech ipg-53h13pes-s_firmwareNo range specified—
xiongmaitech ipg-53h13pes-sl_firmwareNo range specified—
xiongmaitech ipg-53h13pl-p_firmwareNo range specified—
xiongmaitech ipg-53h13pl-b_firmwareNo range specified—
xiongmaitech ipg-53h13pl-ae_firmwareNo range specified—
xiongmaitech ipg-53h13pl-s_firmwareNo range specified—
xiongmaitech ipg-53h13p-p_firmwareNo range specified—
xiongmaitech ipg-53h13p-b_firmwareNo range specified—
xiongmaitech ipg-53h13p-ae_firmwareNo range specified—
xiongmaitech ipg-53h13p-s_firmwareNo range specified—
xiongmaitech ipg-83h40pl-b_firmwareNo range specified—
xiongmaitech ipg-83h40pl-p_firmwareNo range specified—
xiongmaitech ipg-83h50p-p_firmwareNo range specified—
xiongmaitech ipg-83h50p-b_firmwareNo range specified—
xiongmaitech ipg-53h10pe-s_firmwareNo range specified—
xiongmaitech ipg-50h10pe-sl_firmwareNo range specified—
xiongmaitech ipg-50h10pe-s_firmwareNo range specified—
xiongmaitech ipm-50hv10pt-wr_firmwareNo range specified—
xiongmaitech ipm-50v10pl-wr_firmwareNo range specified—
xiongmaitech ipm-50h10pe-wr_firmwareNo range specified—
xiongmaitech ipg-54h13pe-s_firmwareNo range specified—
xiongmaitech ipg-54h20pl-s_firmwareNo range specified—
xiongmaitech ipg-50h10pl-r_firmwareNo range specified—
xiongmaitech ipm-50h10pe-o\(r\)_firmwareNo range specified—
xiongmaitech ipg-53h13pl-r_firmwareNo range specified—
xiongmaitech ipg-50h10pe-wp_firmwareNo range specified—
xiongmaitech ipg-50hv10pt-wp_firmwareNo range specified—
xiongmaitech ipg-53hv13pa-wp_firmwareNo range specified—
xiongmaitech ipg-53h13pe-wp_firmwareNo range specified—
xiongmaitech ipg-53h20pl-p_firmwareNo range specified—
xiongmaitech ipg-53h20pl-b_firmwareNo range specified—
xiongmaitech ipg-53h20pl-ae_firmwareNo range specified—
xiongmaitech ipg-53h20pl-s_firmwareNo range specified—
xiongmaitech ipg-50hv20pet-a_firmwareNo range specified—
xiongmaitech ipg-50hv20pet-s_firmwareNo range specified—
xiongmaitech ipg-50hv20pes-s_firmwareNo range specified—
xiongmaitech ipg-50h10pe-wk_firmwareNo range specified—
xiongmaitech ipg-53h13pe-wk_firmwareNo range specified—
xiongmaitech ipg-53h13pe-s_firmwareNo range specified—
xiongmaitech ipm-50h10pe-wrm_firmwareNo range specified—
xiongmaitech ipm-53h13pe-wrm_firmwareNo range specified—
xiongmaitech ipg-83h40af_firmwareNo range specified—
xiongmaitech ipm-50v10pl-wrc_firmwareNo range specified—
xiongmaitech ipm-50h10pe-wrc_firmwareNo range specified—
xiongmaitech ipg-50x10pt-s_firmwareNo range specified—
xiongmaitech ipg-50x10pe-s_firmwareNo range specified—
xiongmaitech ipg-53x13pt-s_firmwareNo range specified—
xiongmaitech ipg-53x13pa-s_firmwareNo range specified—
xiongmaitech ipg-53x13pe-s_firmwareNo range specified—
xiongmaitech ipm-53h13pe-wrc_firmwareNo range specified—
xiongmaitech ipm-53hv13pe-wr_firmwareNo range specified—
xiongmaitech ipm-53v13pl-wr_firmwareNo range specified—
xiongmaitech ipm-53h13pe-wr_firmwareNo range specified—
xiongmaitech ipg-50h10pe-wk-2f_firmwareNo range specified—
xiongmaitech ipg-83h20pl-p_firmwareNo range specified—
xiongmaitech ipg-83h20pl-b_firmwareNo range specified—
xiongmaitech ipg-53hv13pt-s_firmwareNo range specified—
xiongmaitech ipg-53hv13pa-a_firmwareNo range specified—
xiongmaitech ipg-53hv13pa-s_firmwareNo range specified—
xiongmaitech ipm-50hv20pe-wr_firmwareNo range specified—
xiongmaitech ipg-50hv10pt-a_firmwareNo range specified—
xiongmaitech ipg-50hv10pt-s_firmwareNo range specified—
xiongmaitech ipg-50hv10pv-a_firmwareNo range specified—
xiongmaitech ipg-50hv10pv-s_firmwareNo range specified—
xiongmaitech ipg-80h20pt-a_firmwareNo range specified—
xiongmaitech ipg-80h20pt-s_firmwareNo range specified—
xiongmaitech ipg-50h20pt-s_firmwareNo range specified—
xiongmaitech ipg-53h20py-s_firmwareNo range specified—
xiongmaitech ipg-53h13pe-wk-4f_firmwareNo range specified—
xiongmaitech ipg-83h20pa-a_firmwareNo range specified—
xiongmaitech ipg-83h20pa-s_firmwareNo range specified—
xiongmaitech ipg-50hv20psa-s_firmwareNo range specified—
xiongmaitech ipg-50hv20psb-a_firmwareNo range specified—
xiongmaitech ipg-50hv20psb-s_firmwareNo range specified—
xiongmaitech ivg-hp203y-ae_firmwareNo range specified—
xiongmaitech ivg-hp203y-se_firmwareNo range specified—
xiongmaitech ipg-hp500nr-s_firmwareNo range specified—
xiongmaitech ipg-80he20ps-s_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.