Vulnerability · Published Aug 30, 2021 · Assigned by Bitdefender

CVE-2020-15744Stack-based buffer overflow leading to RCE in Victure Camera

Critical 9.6

In plain English

A critical-severity stack buffer overflow in PC420 from Victure. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)1.4%top 27.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420 firmware version 1.2.2 and prior versions.

Affected products (as reported)

VendorProductVersions
Victure PC420 unspecified – through 1.2.2

Weakness: CWE-121 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References