Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow
Vulnerability Description
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia (/usr/bin/sonia) that provides the web interface and other services for controlling the IP camera remotely. Versions of Sonia included in firmware versions prior to DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 do not validate input data length for the 'password' field of the web interface. A remote, unauthenticated attacker may submit a crafted POST request to the IP camera's Sonia web interface that may lead to out-of-bounds memory operations and loss of availability or remote code execution. The issue was originally identified by the researcher in firmware version DH_IPC-HX1X2X-Themis_EngSpnFrn_N_V2.400.0000.30.R.20160803.
CVSS Information
N/A
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
Dahua IP camera 缓冲区错误漏洞
Vulnerability Description
Dahua IP Camera是中国大华（Dahua）公司的一款网络摄像头。 Dahua IP Camera（使用2.400.0000.14.R.20170713之前版本固件和DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621之前版本固件）中存在基于栈的缓冲区溢出漏洞。攻击者可通过提交特制的POST请求利用该漏洞在受影响应用程序上下文中执行任意代码或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A