Vulnerability · Published Aug 3, 2024 · Assigned by VulDB
CVE-2024-7441Vivotek SD9364 httpd read stack-based overflow
High 8.8
In plain English
A high-severity stack buffer overflow in SD9364 from Vivotek. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.1% (higher than 95% of all known vulnerabilities).
Official description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Vivotek SD9364 VVTK-0103f. It has been declared as critical. This vulnerability affects the function read of the component httpd. The manipulation of the argument Content-Length leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273526 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.
Affected products (as reported)
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- VDB-273526 | Vivotek SD9364 httpd read stack-based overflow vdb-entry, technical-description
- VDB-273526 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #383842 | vivotek SD9364 VVTK-0103f buffer overflow third-party-advisory
- https://yjz233.notion.site/vivotek-SD9364-has-stack-buffer-overflow-vulnerability-in-httpd-c9dabd0511d04093865d1d75110429d1?pvs=4 broken-link, exploit