Input validation error in Cisco Video Surveillance 8000 Series IP Cameras - CVE-2020-3507
Published: August 21, 2020
Vulnerability identifier: #VU45898
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3507
CWE-ID: CWE-20
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the affected device.
The vulnerability exists due to insufficient validation of Cisco Discovery Protocol packets. A remote attacker on the local network can send specially crafted traffic to the device and execute arbitrary code on the system.
Affected software
Cisco Video Surveillance 8000 Series IP Cameras
How to mitigate CVE-2020-3507
Install updates from vendor's website.
Cisco Video Surveillance 8000 Series IP Cameras - update to 1.0.9 4