CVE-2019-11878

Medium

Description

An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds.

SeverityMedium
CVSS6.5
Exploit probability—
ProductXiongmaitech Besder Ip20h1 Firmware
PublishedMay 10, 2019
First seenMay 10, 2019

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
xiongmaitech besder_ip20h1_firmware4.02.r12.00035520.12012.047500.00200—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-11878 · Xiongmaitech Besder Ip20h1 Firmware · Dark Radar