Stack-based buffer overflow in 2K Indoor Wi-Fi Security Camera - CVE-2024-52544

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the sonia module. A remote attacker on the local network can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2024-52544

External References

• https://github.com/sfewer-r7/LorexExploit
• https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
• https://www.zerodayinitiative.com/advisories/ZDI-25-731/

Related Security Bulletins

• Multiple vulnerabilities in Lorex 2K Indoor Wi-Fi Security Camera