CVE-2010-4230

EUVD-2010-4204
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
camtroncmnc-200_firmware
1.102a-008:a
camtroncmnc-200
*
tecvozcmnc-200_firmware
1.102a-008:a
tecvozcmnc-200
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.exploit-db.com/exploits/15504
http://www.securityfocus.com/archive/1/514753/100/0/threaded
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt
http://www.exploit-db.com/exploits/15504
http://www.securityfocus.com/archive/1/514753/100/0/threaded
https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt