Buffer overflow in Hikvision products - CVE-2014-4880

Vulnerability identifier: #VU9534

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-4880

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to buffer overflow in the RTSP Packet Handler. A remote attacker can send a specially crafted packet using the Range parameter of the RTSP transaction, trigger memory corruption and cause the service to crash.

Successful exploitation of the vulnerability results in denial of service.

DS-7600NI-V(VP)
DS-7200HWI-SV
DS-76/77xxNI-SP
DS-96xxNI-XT
DS-96xxNI-RT
DS-76/77/86/96xxNI-ST
DS-90/91xxHFI-XT
DS-90/91xxHFI-RT
DS-80/81/90/91/92xxHWI-ST
DS-80/81/90/91xxHFI-ST
DS-7700NI-E4(/N)(/P)
DS-7600NI-E2(/N)(/P)
DS-7600NI-E1(/N)(/P)
DS-7100HGHI-SH
DS-7600NI-SE(/N)(/P)
DS-7300HWI(HFI)-SH
DS-7300HWI-E4(/C)
DS-7200HWI-E2(/C)
DS-7200HWI-E1(/C)
DS-7200HVI-SV
DS-7200HFI-SH
DS-7200HWI-SH(SL)
DS-7100HVI-SL(SH)
DS-7100HWI-SL(SH)
Hikvision DVR/NVR Firmware
DS-7300HI-ST
DS-7300HFHI-SL(ST)
DS-7200HFHI-SL(ST)(SE)
DS-7600HI-ST
DS-7104NI-SL/W
DS-7100NI-SL
DS-8100HCI(HFSI)(HWSI)-SH
DS-7600NI-SN(/N)(/P)
DS-7100NI-SN(/N)(/P)
DS-6700HFI(-SATA)
DS-6700HWI(-SATA)
DS-8100HDI-ST
DS-8100HFHI-SL(ST)
DS-7300HFI-ST
DS-7204HWI-SV
DS-7200HVI-SH
DS-7200HWI-Ex/C/F
DS-8100HQHI-SH
DS-8100HGHI-SH
DS-7300HQHI-SH
DS-7300HGHI-SH
DS-7200HQHI-SH
DS-7200HGHI-SH
DS-7100HQHI-SH

Install update from vendor's website.

• Exploit #1380 - Hikvision DVR - RTSP Request Remote Code Execution (Metasploit) (March 18, 2020)
• Exploit #1808 - Hikvision DVR RTSP Request Remote Code Execution (March 18, 2020)

• http://www.hikvision.com/en/Press-Release-details_435_i853.html

• Denial of service in Hikvision Cameras