CVE-2019-9677
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.
Los campos específicos de la interfaz CGI de algunos productos Dahua no están estrictamente verificados, un atacante puede causar un desbordamiento del búfer mediante la construcción de paquetes maliciosos. Entre los productos afectados se incluyen: IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDW5X2X, IPC-HX, para versiones cuyo tiempo de Compilación es antes del 18 de Agosto del 2019.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-03-11 CVE Reserved
- 2019-09-18 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dahuasecurity.com/support/cybersecurity/details/637 | 2019-09-19 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw1x2x Search vendor "Dahuasecurity" for product "Ipc-hdw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw1x2x Search vendor "Dahuasecurity" for product "Ipc-hfw1x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw2x2x Search vendor "Dahuasecurity" for product "Ipc-hdw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw2x2x Search vendor "Dahuasecurity" for product "Ipc-hfw2x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw4x2x Search vendor "Dahuasecurity" for product "Ipc-hfw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdbw4x2x Search vendor "Dahuasecurity" for product "Ipc-hdbw4x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hdw5x2x Search vendor "Dahuasecurity" for product "Ipc-hdw5x2x" | - | - |
Safe
|
| Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Firmware Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" | < 2019-08-18 Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x Firmware" and version " < 2019-08-18" | - |
Affected
| in | Dahuasecurity Search vendor "Dahuasecurity" | Ipc-hfw5x2x Search vendor "Dahuasecurity" for product "Ipc-hfw5x2x" | - | - |
Safe
|