Vulnerability CVE-2019-12223


Published: 2019-09-05

Description:
An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

Vendor: Hanwha-security
Product: Srn-472s firmware 
Version: 1.07_190502;

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.8/10
6.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete

 References:
https://gist.github.com/dustinnoe/66f91573a0080c9fb2c21819d8805a82
https://medium.com/@noe.dustin/samsung-webviewer-remote-dos-vulberability-cve-2019-12223-5f4afbc83fbd
https://www.hanwha-security.com/en/products/video-recorder/nvr/ch4/SRN-472S/overview/

Related CVE
CVE-2018-6303
Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams
CVE-2018-6302
Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams
CVE-2018-6301
Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
CVE-2018-6300
Remote password change in Hanwha Techwin Smartcams
CVE-2018-6299
Authentication bypass in Hanwha Techwin Smartcams
CVE-2018-6298
Remote code execution in Hanwha Techwin Smartcams
CVE-2018-6297
Buffer overflow in Hanwha Techwin Smartcams
CVE-2018-6296
An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams

Copyright 2019, cxsecurity.com

 

Back to Top