CRITICAL · 9.4

CVE-2021-32941

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitr...

Vulnerability Description

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

CVSS Score

9.4

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AnnkeN48Pbb Firmware< 3.4.106
AnnkeN48Pbb-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-32941?

CVE-2021-32941 is a vulnerability with a CVSS score of 9.4 (CRITICAL). Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitr...

How severe is CVE-2021-32941?

CVE-2021-32941 has been rated CRITICAL with a CVSS base score of 9.4/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-32941?

Check the references section above for vendor advisories and patch information. Affected products include: Annke N48Pbb Firmware, Annke N48Pbb.