CVE-2020-24918
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ambarella Oryx RTSP Server是美国Ambarella公司的一个应用软件。通过从高分辨率视频流中提取有价值的数据，使相机更加智能。 Ambarella Oryx RTSP Server 2020-01-07 存在缓冲区错误漏洞，该漏洞允许未经认证的攻击者可利用该漏洞发送一个精心制作的RTSP请求，带有一个长摘要认证头，以执行libamprotocol- RTSP . . o中的解析认证头()中的任意代码。1在RTSP SVC(或导致崩溃)。例如，这允许远程接管Furbo的狗相机。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-24918
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parse_authentication_header() in libamprotocol-rtsp.so.1 in rtsp_svc (or cause a crash). This allows remote takeover of a Furbo Dog Camera, for example. NOTE: The vendor states that the RTSP library is used for DEMO only, using it in product is a customer's behavior. Ambarella has emphasized that RTSP is DEMO only library, should NOT be used in product in our document. Because Ambarella's SDK is proprietary, we didn't publish our SDK source code in public network.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ambarella Oryx RTSP Server 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ambarella Oryx RTSP Server是美国Ambarella公司的一个应用软件。通过从高分辨率视频流中提取有价值的数据，使相机更加智能。 Ambarella Oryx RTSP Server 2020-01-07 存在缓冲区错误漏洞，该漏洞允许未经认证的攻击者可利用该漏洞发送一个精心制作的RTSP请求，带有一个长摘要认证头，以执行libamprotocol- RTSP . . o中的解析认证头()中的任意代码。1在RTSP SVC(或导致崩溃)。例如，这允许远程接管Furbo的狗相机。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-24918
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-24918
请登录查看更多情报信息。
Security Blog Posts for CVE-2020-24918 (1)
Other References for CVE-2020-24918 (2)
-
https://www.ambarella.com x_refsource_MISC
-
https://www.somersetrecon.com/blog x_refsource_MISC
Same Patch Batch · n/a · 2021-04-30 · 22 CVEs total
| CVE-2020-7731 | 7.5 HIGH | Denial of Service (DoS) |
| CVE-2021-31933 | 7.2 HIGH | Chamilo 输入验证错误漏洞 |
| CVE-2021-31232 | cortex 输入验证错误漏洞 | |
| CVE-2021-31873 | klibc 输入验证错误漏洞 | |
| CVE-2021-31919 | Rust rkyv crate 安全漏洞 | |
| CVE-2021-31871 | klibc 输入验证错误漏洞 | |
| CVE-2021-31872 | klibc 输入验证错误漏洞 | |
| CVE-2021-31870 | klibc 输入验证错误漏洞 | |
| CVE-2021-26807 | Boost Connect community Galaxy Client 代码问题漏洞 | |
| CVE-2020-1721 | pki-core 跨站脚本漏洞 | |
| CVE-2021-20266 | Red Hat Package Manager 缓冲区错误漏洞 | |
| CVE-2021-28959 | Zoho ManageEngine Eventlog Analyzer 路径遍历漏洞 | |
| CVE-2021-31231 | Grafana 输入验证错误漏洞 | |
| CVE-2021-31792 | SuiteCRM 跨站脚本漏洞 | |
| CVE-2020-27519 | pritunl 安全漏洞 | |
| CVE-2021-31926 | CubeCoders AMP 安全漏洞 | |
| CVE-2020-18084 | Yzmcms 跨站脚本漏洞 | |
| CVE-2020-28943 | Open-xchange OX App Suite 代码问题漏洞 | |
| CVE-2020-28944 | Open-Xchange OX App Suite 资源管理错误漏洞 | |
| CVE-2021-31935 | Open-xchange OX App Suite 跨站脚本漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-24918
No comments yet