Buffer overflow in Hikvision products - CVE-2014-4880

Vulnerability identifier: #VU9534

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:A/U:Clear

CVE-ID: CVE-2014-4880

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vendor: Hikvision

Affected software:
DS-8100HFHI-SL(ST)
DS-7300HFHI-SL(ST)
DS-7200HFHI-SL(ST)(SE)
DS-7600HI-ST
DS-7104NI-SL/W
DS-7100NI-SL
DS-8100HCI(HFSI)(HWSI)-SH
DS-7600NI-SN(/N)(/P)
DS-7100NI-SN(/N)(/P)
DS-6700HFI(-SATA)
DS-6700HWI(-SATA)
DS-8100HDI-ST
DS-7300HI-ST
DS-7300HFI-ST
DS-7204HWI-SV
DS-7200HVI-SH
DS-7200HWI-Ex/C/F
DS-8100HQHI-SH
DS-8100HGHI-SH
DS-7300HQHI-SH
DS-7300HGHI-SH
DS-7200HQHI-SH
DS-7200HGHI-SH
DS-7100HQHI-SH
DS-7100HGHI-SH
DS-7200HWI-SV
DS-76/77xxNI-SP
DS-96xxNI-XT
DS-96xxNI-RT
DS-76/77/86/96xxNI-ST
DS-90/91xxHFI-XT
DS-90/91xxHFI-RT
DS-80/81/90/91/92xxHWI-ST
DS-80/81/90/91xxHFI-ST
DS-7700NI-E4(/N)(/P)
DS-7600NI-E2(/N)(/P)
DS-7600NI-E1(/N)(/P)
DS-7600NI-V(VP)
DS-7600NI-SE(/N)(/P)
DS-7300HWI(HFI)-SH
DS-7300HWI-E4(/C)
DS-7200HWI-E2(/C)
DS-7200HWI-E1(/C)
DS-7200HVI-SV
DS-7200HFI-SH
DS-7200HWI-SH(SL)
DS-7100HVI-SL(SH)
DS-7100HWI-SL(SH)
Hikvision DVR/NVR Firmware

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the RTSP Packet Handler. A remote attacker can send a specially crafted packet using the Range parameter of the RTSP transaction, trigger memory corruption and cause the service to crash.

Successful exploitation of the vulnerability results in denial of service.

Install update from vendor's website.

• http://www.hikvision.com/en/Press-Release-details_435_i853.html