Vulnerability Description
Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hikvision | Ds-2Cd7153-E Firmware | 4.1.0_b130111 |
| Hikvision | Ds-2Cd7153-E | - |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-08/0046.html
- http://packetstormsecurity.com/files/122718/Hikvision-IP-Cameras-Overflow-Bypass
- http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabiliExploit
- http://www.securityfocus.com/bid/61642Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86292
- http://archives.neohapsis.com/archives/bugtraq/2013-08/0046.html
- http://packetstormsecurity.com/files/122718/Hikvision-IP-Cameras-Overflow-Bypass
- http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabiliExploit
- http://www.securityfocus.com/bid/61642Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86292
FAQ
What is CVE-2013-4977?
CVE-2013-4977 is a vulnerability with a CVSS score of 10.0 (HIGH). Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service ...
How severe is CVE-2013-4977?
CVE-2013-4977 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4977?
Check the references section above for vendor advisories and patch information. Affected products include: Hikvision Ds-2Cd7153-E Firmware, Hikvision Ds-2Cd7153-E.