ID:1380 - Exploit for Buffer overflow in Hikvision products - CVE-2014-4880

Vulnerability identifier: #VU9534

Vulnerability risk: Low

CVE-ID: CVE-2014-4880

CWE-ID: CWE-120

Exploitation vector: Remote access

Vulnerable software:
DS-8100HFHI-SL(ST)
DS-7300HFHI-SL(ST)
DS-7200HFHI-SL(ST)(SE)
DS-7600HI-ST
DS-7104NI-SL/W
DS-7100NI-SL
DS-8100HCI(HFSI)(HWSI)-SH
DS-7600NI-SN(/N)(/P)
DS-7100NI-SN(/N)(/P)
DS-6700HFI(-SATA)
DS-6700HWI(-SATA)
DS-8100HDI-ST
DS-7300HI-ST
DS-7300HFI-ST
DS-7204HWI-SV
DS-7200HVI-SH
DS-7200HWI-Ex/C/F
DS-8100HQHI-SH
DS-8100HGHI-SH
DS-7300HQHI-SH
DS-7300HGHI-SH
DS-7200HQHI-SH
DS-7200HGHI-SH
DS-7100HQHI-SH
DS-7100HGHI-SH
DS-7200HWI-SV
DS-76/77xxNI-SP
DS-96xxNI-XT
DS-96xxNI-RT
DS-76/77/86/96xxNI-ST
DS-90/91xxHFI-XT
DS-90/91xxHFI-RT
DS-80/81/90/91/92xxHWI-ST
DS-80/81/90/91xxHFI-ST
DS-7700NI-E4(/N)(/P)
DS-7600NI-E2(/N)(/P)
DS-7600NI-E1(/N)(/P)
DS-7600NI-V(VP)
DS-7600NI-SE(/N)(/P)
DS-7300HWI(HFI)-SH
DS-7300HWI-E4(/C)
DS-7200HWI-E2(/C)
DS-7200HWI-E1(/C)
DS-7200HVI-SV
DS-7200HFI-SH
DS-7200HWI-SH(SL)
DS-7100HVI-SL(SH)
DS-7100HWI-SL(SH)
Hikvision DVR/NVR Firmware

https://www.exploit-db.com/exploits/35356/

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the RTSP Packet Handler. A remote attacker can send a specially crafted packet using the Range parameter of the RTSP transaction, trigger memory corruption and cause the service to crash.

Successful exploitation of the vulnerability results in denial of service.

Install update from vendor's website.