Vulnerability · Published Aug 3, 2024 · Assigned by VulDB
CVE-2024-7439Vivotek CC8160 httpd read stack-based overflow
High 8.8
In plain English
A high-severity stack buffer overflow in CC8160 from Vivotek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek CC8160 VVTK-0100d and classified as critical. Affected by this issue is the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273524. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- VDB-273524 | Vivotek CC8160 httpd read stack-based overflow vdb-entry, technical-description
- VDB-273524 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #383830 | VIVOTEK CC8160 VVTK-0100d buffer overflow third-party-advisory
- https://yjz233.notion.site/vivotek-CC8160-has-stack-buffer-overflow-vulnerability-in-httpd-8409f967d3064493b649720f36d59081?pvs=4 broken-link, exploit