CVE-2024-3506 HIGH

CVE-2024-3506: Camera Driver possible Buffer Overflow

Vendor Milestone Systems
Product XProtect VMS
Weakness CWE-120
Published October 8, 2024
Last update October 8, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L

What the vulnerability does

01Description

A possible buffer overflow in selected cameras' drivers from XProtect Device Pack can allow an attacker with access to internal network to execute commands on Recording Server under strict conditions.

Key dates

02Disclosure timeline

October 8, 2024 CVE published
October 8, 2024 Record updated