CVE-2021-32941 CRITICAL

CVE-2021-32941: Annke Network Video Recorder - Stack-based Buffer Overflow

Vendor Annke
Product N48PBB (NVR)
Weakness CWE-121
Published May 23, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

9.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

What the vulnerability does

01Description

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

Key dates

02Disclosure timeline

May 23, 2022 CVE published
April 16, 2025 Record updated