CVE-2015-4408
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the ISAPI issue.
Desbordamiento de búfer en dispositivos Hikvision NVR DS-76xxNI-E1/2 y DS-77xxxNI-E4 en versiones anteriores a 3.4.0 permite a usuarios remotos autenticados provocar una denegación de servicio (interrupción del servicio) a través de una petición HTTP manipulada, también conocido como el problema ISAPI.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-06 CVE Reserved
- 2017-03-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.hikvision.com/En/Press-Release-details_435_i1023.html | 2017-03-14 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hikvision Search vendor "Hikvision" | Ds-76xxx Series Firmware Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7604ni-e1\/4p Search vendor "Hikvision" for product "Ds-7604ni-e1\/4p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-76xxx Series Firmware Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-12\/8p Search vendor "Hikvision" for product "Ds-7608ni-12\/8p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-76xxx Series Firmware Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-e1\/8p Search vendor "Hikvision" for product "Ds-7608ni-e1\/8p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-76xxx Series Firmware Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-12\/16p Search vendor "Hikvision" for product "Ds-7616ni-12\/16p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-76xxx Series Firmware Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-76xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-e2\/16p Search vendor "Hikvision" for product "Ds-7616ni-e2\/16p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-77xxx Series Firmware Search vendor "Hikvision" for product "Ds-77xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-77xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7716ni-14\/16p Search vendor "Hikvision" for product "Ds-7716ni-14\/16p" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-77xxx Series Firmware Search vendor "Hikvision" for product "Ds-77xxx Series Firmware" | <= 3.3.4 Search vendor "Hikvision" for product "Ds-77xxx Series Firmware" and version " <= 3.3.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7716ni-sp\/16 Search vendor "Hikvision" for product "Ds-7716ni-sp\/16" | - | - |
Safe
|