Vulnerability · Published Mar 28, 2022 · Assigned by mitre

CVE-2022-26259

High 7.8

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities).

Severity (CVSS NVD)7.8High

Exploit odds (30 days)2.4%top 16.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.xiongmaitech.com/en/index.php/service/notice_info/51/2 x_refsource_MISC
https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/ x_refsource_MISC