CVE-2017-16725
Description
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xiongmaitech ahb7008f8-h_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7008f4-h_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7008f2-h_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7008t-mh-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-mh-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-h-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t-lm-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-lm-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t4-mh-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t-mh-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t4-h-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-h-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t4-h-v2 | _firmware | — |
| xiongmaitech ahb7032f8-lm-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f4-lm-v2_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7808r-ms-v3_firmware | 4.02.r11.nat.onvifc.20170327 | — |
| xiongmaitech ahb7804r-ms-v3_firmware | 4.02.r11.nat.onvifc.20170327 | — |
| xiongmaitech ahb7016t-lm-v3_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7008t-lm-v3_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7004t-lm-v3_firmware | 4.02.r11.3070 | — |
| xiongmaitech ahb7016t4-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t-mh-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-mh-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-mh-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-gl-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-gl-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-g-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016f8-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016f8-gl-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016f4-gl-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016f2-gl-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7808r-lm-v3_firmware | 4.02.r11.nat.onvifc.20171120 | — |
| xiongmaitech ahb7804r-lm-v3_firmware | 4.02.r11.nat.onvifc.20171120 | — |
| xiongmaitech ahb7804r-lms-v3_firmware | 4.02.r11.nat.onvifc.20171019 | — |
| xiongmaitech ahb7008f8-g-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008f4-g-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008f2-g-v4_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f4-lm-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f2-lm-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f8-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f4-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7032f2-gs-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7016t-lme-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7008t-lme-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7004t-lme-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7808r-mh-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ahb7804r-mh-v3_firmware | 4.02.r11.7601 | — |
| xiongmaitech ipg-50h10pl-p_firmware | No range specified | — |
| xiongmaitech ipg-50h10pl-b_firmware | No range specified | — |
| xiongmaitech ipg-50h10pl-ae_firmware | No range specified | — |
| xiongmaitech ipg-50h10pl-s_firmware | No range specified | — |
| xiongmaitech ipg-52h10pl-p_firmware | No range specified | — |
| xiongmaitech ipg-52h10pl-b_firmware | No range specified | — |
| xiongmaitech ipg-53h13pet-s_firmware | No range specified | — |
| xiongmaitech ipg-53h13pls-s_firmware | No range specified | — |
| xiongmaitech ipg-53h13pes-s_firmware | No range specified | — |
| xiongmaitech ipg-53h13pes-sl_firmware | No range specified | — |
| xiongmaitech ipg-53h13pl-p_firmware | No range specified | — |
| xiongmaitech ipg-53h13pl-b_firmware | No range specified | — |
| xiongmaitech ipg-53h13pl-ae_firmware | No range specified | — |
| xiongmaitech ipg-53h13pl-s_firmware | No range specified | — |
| xiongmaitech ipg-53h13p-p_firmware | No range specified | — |
| xiongmaitech ipg-53h13p-b_firmware | No range specified | — |
| xiongmaitech ipg-53h13p-ae_firmware | No range specified | — |
| xiongmaitech ipg-53h13p-s_firmware | No range specified | — |
| xiongmaitech ipg-83h40pl-b_firmware | No range specified | — |
| xiongmaitech ipg-83h40pl-p_firmware | No range specified | — |
| xiongmaitech ipg-83h50p-p_firmware | No range specified | — |
| xiongmaitech ipg-83h50p-b_firmware | No range specified | — |
| xiongmaitech ipg-53h10pe-s_firmware | No range specified | — |
| xiongmaitech ipg-50h10pe-sl_firmware | No range specified | — |
| xiongmaitech ipg-50h10pe-s_firmware | No range specified | — |
| xiongmaitech ipm-50hv10pt-wr_firmware | No range specified | — |
| xiongmaitech ipm-50v10pl-wr_firmware | No range specified | — |
| xiongmaitech ipm-50h10pe-wr_firmware | No range specified | — |
| xiongmaitech ipg-54h13pe-s_firmware | No range specified | — |
| xiongmaitech ipg-54h20pl-s_firmware | No range specified | — |
| xiongmaitech ipg-50h10pl-r_firmware | No range specified | — |
| xiongmaitech ipm-50h10pe-o\(r\)_firmware | No range specified | — |
| xiongmaitech ipg-53h13pl-r_firmware | No range specified | — |
| xiongmaitech ipg-50h10pe-wp_firmware | No range specified | — |
| xiongmaitech ipg-50hv10pt-wp_firmware | No range specified | — |
| xiongmaitech ipg-53hv13pa-wp_firmware | No range specified | — |
| xiongmaitech ipg-53h13pe-wp_firmware | No range specified | — |
| xiongmaitech ipg-53h20pl-p_firmware | No range specified | — |
| xiongmaitech ipg-53h20pl-b_firmware | No range specified | — |
| xiongmaitech ipg-53h20pl-ae_firmware | No range specified | — |
| xiongmaitech ipg-53h20pl-s_firmware | No range specified | — |
| xiongmaitech ipg-50hv20pet-a_firmware | No range specified | — |
| xiongmaitech ipg-50hv20pet-s_firmware | No range specified | — |
| xiongmaitech ipg-50hv20pes-s_firmware | No range specified | — |
| xiongmaitech ipg-50h10pe-wk_firmware | No range specified | — |
| xiongmaitech ipg-53h13pe-wk_firmware | No range specified | — |
| xiongmaitech ipg-53h13pe-s_firmware | No range specified | — |
| xiongmaitech ipm-50h10pe-wrm_firmware | No range specified | — |
| xiongmaitech ipm-53h13pe-wrm_firmware | No range specified | — |
| xiongmaitech ipg-83h40af_firmware | No range specified | — |
| xiongmaitech ipm-50v10pl-wrc_firmware | No range specified | — |
| xiongmaitech ipm-50h10pe-wrc_firmware | No range specified | — |
| xiongmaitech ipg-50x10pt-s_firmware | No range specified | — |
| xiongmaitech ipg-50x10pe-s_firmware | No range specified | — |
| xiongmaitech ipg-53x13pt-s_firmware | No range specified | — |
| xiongmaitech ipg-53x13pa-s_firmware | No range specified | — |
| xiongmaitech ipg-53x13pe-s_firmware | No range specified | — |
| xiongmaitech ipm-53h13pe-wrc_firmware | No range specified | — |
| xiongmaitech ipm-53hv13pe-wr_firmware | No range specified | — |
| xiongmaitech ipm-53v13pl-wr_firmware | No range specified | — |
| xiongmaitech ipm-53h13pe-wr_firmware | No range specified | — |
| xiongmaitech ipg-50h10pe-wk-2f_firmware | No range specified | — |
| xiongmaitech ipg-83h20pl-p_firmware | No range specified | — |
| xiongmaitech ipg-83h20pl-b_firmware | No range specified | — |
| xiongmaitech ipg-53hv13pt-s_firmware | No range specified | — |
| xiongmaitech ipg-53hv13pa-a_firmware | No range specified | — |
| xiongmaitech ipg-53hv13pa-s_firmware | No range specified | — |
| xiongmaitech ipm-50hv20pe-wr_firmware | No range specified | — |
| xiongmaitech ipg-50hv10pt-a_firmware | No range specified | — |
| xiongmaitech ipg-50hv10pt-s_firmware | No range specified | — |
| xiongmaitech ipg-50hv10pv-a_firmware | No range specified | — |
| xiongmaitech ipg-50hv10pv-s_firmware | No range specified | — |
| xiongmaitech ipg-80h20pt-a_firmware | No range specified | — |
| xiongmaitech ipg-80h20pt-s_firmware | No range specified | — |
| xiongmaitech ipg-50h20pt-s_firmware | No range specified | — |
| xiongmaitech ipg-53h20py-s_firmware | No range specified | — |
| xiongmaitech ipg-53h13pe-wk-4f_firmware | No range specified | — |
| xiongmaitech ipg-83h20pa-a_firmware | No range specified | — |
| xiongmaitech ipg-83h20pa-s_firmware | No range specified | — |
| xiongmaitech ipg-50hv20psa-s_firmware | No range specified | — |
| xiongmaitech ipg-50hv20psb-a_firmware | No range specified | — |
| xiongmaitech ipg-50hv20psb-s_firmware | No range specified | — |
| xiongmaitech ivg-hp203y-ae_firmware | No range specified | — |
| xiongmaitech ivg-hp203y-se_firmware | No range specified | — |
| xiongmaitech ipg-hp500nr-s_firmware | No range specified | — |
| xiongmaitech ipg-80he20ps-s_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.