CVE-2017-16725: Buffer Overflow

Published Dec 20, 2017

Updated

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.

Affected Software

270 affected components

Xiongmaitech Ahb7008f8-h Firmware=4.02.r11.3070

Xiongmaitech Ahb7008f8-h

Xiongmaitech Ahb7008f4-h Firmware=4.02.r11.3070

Xiongmaitech Ahb7008f4-h

Xiongmaitech Ahb7008f2-h Firmware=4.02.r11.3070

Xiongmaitech Ahb7008f2-h

Xiongmaitech Ahb7008t-mh-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-mh-v2

Xiongmaitech Ahb7004t-mh-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-mh-v2

Xiongmaitech Ahb7004t-h-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-h-v2

Xiongmaitech Ahb7016t-lm-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t-lm-v2

Xiongmaitech Ahb7008t-lm-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-lm-v2

Xiongmaitech Ahb7016t4-mh-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t4-mh-v2

Xiongmaitech Ahb7016t-mh-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t-mh-v2

Xiongmaitech Ahb7008t4-h-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t4-h-v2

Xiongmaitech Ahb7008t-h-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-h-v2

Xiongmaitech Ahb7008t4-h-v2=_firmware-4.02.r11.7601

Xiongmaitech Ahb7032f8-lm-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f8-lm-v2

Xiongmaitech Ahb7032f4-lm-v2 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f4-lm-v2

Xiongmaitech Ahb7808r-ms-v3 Firmware=4.02.r11.nat.onvifc.20170327

Xiongmaitech Ahb7808r-ms-v3

Xiongmaitech Ahb7804r-ms-v3 Firmware=4.02.r11.nat.onvifc.20170327

Xiongmaitech Ahb7804r-ms-v3

Xiongmaitech Ahb7016t-lm-v3 Firmware=4.02.r11.3070

Xiongmaitech Ahb7016t-lm-v3

Xiongmaitech Ahb7008t-lm-v3 Firmware=4.02.r11.3070

Xiongmaitech Ahb7008t-lm-v3

Xiongmaitech Ahb7004t-lm-v3 Firmware=4.02.r11.3070

Xiongmaitech Ahb7004t-lm-v3

Xiongmaitech Ahb7016t4-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t4-gs-v3

Xiongmaitech Ahb7016t-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t-gs-v3

Xiongmaitech Ahb7008t-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-gs-v3

Xiongmaitech Ahb7004t-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-gs-v3

Xiongmaitech Ahb7016t-mh-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t-mh-v3

Xiongmaitech Ahb7008t-mh-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-mh-v3

Xiongmaitech Ahb7004t-mh-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-mh-v3

Xiongmaitech Ahb7008t-gl-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-gl-v4

Xiongmaitech Ahb7004t-gl-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-gl-v4

Xiongmaitech Ahb7004t-g-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-g-v4

Xiongmaitech Ahb7016f8-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016f8-gs-v3

Xiongmaitech Ahb7016f8-gl-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016f8-gl-v4

Xiongmaitech Ahb7016f4-gl-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016f4-gl-v4

Xiongmaitech Ahb7016f2-gl-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016f2-gl-v4

Xiongmaitech Ahb7808r-lm-v3 Firmware=4.02.r11.nat.onvifc.20171120

Xiongmaitech Ahb7808r-lm-v3

Xiongmaitech Ahb7804r-lm-v3 Firmware=4.02.r11.nat.onvifc.20171120

Xiongmaitech Ahb7804r-lm-v3

Xiongmaitech Ahb7804r-lms-v3 Firmware=4.02.r11.nat.onvifc.20171019

Xiongmaitech Ahb7804r-lms-v3

Xiongmaitech Ahb7008f8-g-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008f8-g-v4

Xiongmaitech Ahb7008f4-g-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008f4-g-v4

Xiongmaitech Ahb7008f2-g-v4 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008f2-g-v4

Xiongmaitech Ahb7032f4-lm-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f4-lm-v3

Xiongmaitech Ahb7032f2-lm-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f2-lm-v3

Xiongmaitech Ahb7032f8-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f8-gs-v3

Xiongmaitech Ahb7032f4-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f4-gs-v3

Xiongmaitech Ahb7032f2-gs-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7032f2-gs-v3

Xiongmaitech Ahb7016t-lme-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7016t-lme-v3

Xiongmaitech Ahb7008t-lme-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7008t-lme-v3

Xiongmaitech Ahb7004t-lme-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7004t-lme-v3

Xiongmaitech Ahb7808r-mh-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7808r-mh-v3

Xiongmaitech Ahb7804r-mh-v3 Firmware=4.02.r11.7601

Xiongmaitech Ahb7804r-mh-v3

Xiongmaitech Ipg-50h10pl-p Firmware

Xiongmaitech Ipg-50h10pl-p

Xiongmaitech Ipg-50h10pl-b Firmware

Xiongmaitech Ipg-50h10pl-b

Xiongmaitech Ipg-50h10pl-ae Firmware

Xiongmaitech Ipg-50h10pl-ae

Xiongmaitech Ipg-50h10pl-s Firmware

Xiongmaitech Ipg-50h10pl-s

Xiongmaitech Ipg-52h10pl-p Firmware

Xiongmaitech Ipg-52h10pl-p

Xiongmaitech Ipg-52h10pl-b Firmware

Xiongmaitech Ipg-52h10pl-b

Xiongmaitech Ipg-53h13pet-s Firmware

Xiongmaitech Ipg-53h13pet-s

Xiongmaitech Ipg-53h13pls-s Firmware

Xiongmaitech Ipg-53h13pls-s

Xiongmaitech Ipg-53h13pes-s Firmware

Xiongmaitech Ipg-53h13pes-s

Xiongmaitech Ipg-53h13pes-sl Firmware

Xiongmaitech Ipg-53h13pes-sl

Xiongmaitech Ipg-53h13pl-p Firmware

Xiongmaitech Ipg-53h13pl-p

Xiongmaitech Ipg-53h13pl-b Firmware

Xiongmaitech Ipg-53h13pl-b

Xiongmaitech Ipg-53h13pl-ae Firmware

Xiongmaitech Ipg-53h13pl-ae

Xiongmaitech Ipg-53h13pl-s Firmware

Xiongmaitech Ipg-53h13pl-s

Xiongmaitech Ipg-53h13p-p Firmware

Xiongmaitech Ipg-53h13p-p

Xiongmaitech Ipg-53h13p-b Firmware

Xiongmaitech Ipg-53h13p-b

Xiongmaitech Ipg-53h13p-ae Firmware

Xiongmaitech Ipg-53h13p-ae

Xiongmaitech Ipg-53h13p-s Firmware

Xiongmaitech Ipg-53h13p-s

Xiongmaitech Ipg-83h40pl-b Firmware

Xiongmaitech Ipg-83h40pl-b

Xiongmaitech Ipg-83h40pl-p Firmware

Xiongmaitech Ipg-83h40pl-p

Xiongmaitech Ipg-83h50p-p Firmware

Xiongmaitech Ipg-83h50p-p

Xiongmaitech Ipg-83h50p-b Firmware

Xiongmaitech Ipg-83h50p-b

Xiongmaitech Ipg-53h10pe-s Firmware

Xiongmaitech Ipg-53h10pe-s

Xiongmaitech Ipg-50h10pe-sl Firmware

Xiongmaitech Ipg-50h10pe-sl

Xiongmaitech Ipg-50h10pe-s Firmware

Xiongmaitech Ipg-50h10pe-s

Xiongmaitech Ipm-50hv10pt-wr Firmware

Xiongmaitech Ipm-50hv10pt-wr

Xiongmaitech Ipm-50v10pl-wr Firmware

Xiongmaitech Ipm-50v10pl-wr

Xiongmaitech Ipm-50h10pe-wr Firmware

Xiongmaitech Ipm-50h10pe-wr

Xiongmaitech Ipg-54h13pe-s Firmware

Xiongmaitech Ipg-54h13pe-s

Xiongmaitech Ipg-54h20pl-s Firmware

Xiongmaitech Ipg-54h20pl-s

Xiongmaitech Ipg-50h10pl-r Firmware

Xiongmaitech Ipg-50h10pl-r

Xiongmaitech Ipm-50h10pe-o\(r\) Firmware

Xiongmaitech Ipm-50h10pe-o\(r\)

Xiongmaitech Ipg-53h13pl-r Firmware

Xiongmaitech Ipg-53h13pl-r

Xiongmaitech Ipg-50h10pe-wp Firmware

Xiongmaitech Ipg-50h10pe-wp

Xiongmaitech Ipg-50hv10pt-wp Firmware

Xiongmaitech Ipg-50hv10pt-wp

Xiongmaitech Ipg-53hv13pa-wp Firmware

Xiongmaitech Ipg-53hv13pa-wp

Xiongmaitech Ipg-53h13pe-wp Firmware

Xiongmaitech Ipg-53h13pe-wp

Xiongmaitech Ipg-53h20pl-p Firmware

Xiongmaitech Ipg-53h20pl-p

Xiongmaitech Ipg-53h20pl-b Firmware

Xiongmaitech Ipg-53h20pl-b

Xiongmaitech Ipg-53h20pl-ae Firmware

Xiongmaitech Ipg-53h20pl-ae

Xiongmaitech Ipg-53h20pl-s Firmware

Xiongmaitech Ipg-53h20pl-s

Xiongmaitech Ipg-50hv20pet-a Firmware

Xiongmaitech Ipg-50hv20pet-a

Xiongmaitech Ipg-50hv20pet-s Firmware

Xiongmaitech Ipg-50hv20pet-s

Xiongmaitech Ipg-50hv20pes-s Firmware

Xiongmaitech Ipg-50hv20pes-s

Xiongmaitech Ipg-50h10pe-wk Firmware

Xiongmaitech Ipg-50h10pe-wk

Xiongmaitech Ipg-53h13pe-wk Firmware

Xiongmaitech Ipg-53h13pe-wk

Xiongmaitech Ipg-53h13pe-s Firmware

Xiongmaitech Ipg-53h13pe-s

Xiongmaitech Ipm-50h10pe-wrm Firmware

Xiongmaitech Ipm-50h10pe-wrm

Xiongmaitech Ipm-53h13pe-wrm Firmware

Xiongmaitech Ipm-53h13pe-wrm

Xiongmaitech Ipg-83h40af Firmware

Xiongmaitech Ipg-83h40af

Xiongmaitech Ipm-50v10pl-wrc Firmware

Xiongmaitech Ipm-50h10pe-wrc Firmware

Xiongmaitech Ipm-50h10pe-wrc

Xiongmaitech Ipg-50x10pt-s Firmware

Xiongmaitech Ipg-50x10pt-s

Xiongmaitech Ipg-50x10pe-s Firmware

Xiongmaitech Ipg-50x10pe-s

Xiongmaitech Ipg-53x13pt-s Firmware

Xiongmaitech Ipg-53x13pt-s

Xiongmaitech Ipg-53x13pa-s Firmware

Xiongmaitech Ipg-53x13pa-s

Xiongmaitech Ipg-53x13pe-s Firmware

Xiongmaitech Ipg-53x13pe-s

Xiongmaitech Ipm-53h13pe-wrc Firmware

Xiongmaitech Ipm-53h13pe-wrc

Xiongmaitech Ipm-53hv13pe-wr Firmware

Xiongmaitech Ipm-53hv13pe-wr

Xiongmaitech Ipm-53v13pl-wr Firmware

Xiongmaitech Ipm-53v13pl-wr

Xiongmaitech Ipm-53h13pe-wr Firmware

Xiongmaitech Ipm-53h13pe-wr

Xiongmaitech Ipg-50h10pe-wk-2f Firmware

Xiongmaitech Ipg-50h10pe-wk-2f

Xiongmaitech Ipg-83h20pl-p Firmware

Xiongmaitech Ipg-83h20pl-p

Xiongmaitech Ipg-83h20pl-b Firmware

Xiongmaitech Ipg-83h20pl-b

Xiongmaitech Ipg-53hv13pt-s Firmware

Xiongmaitech Ipg-53hv13pt-s

Xiongmaitech Ipg-53hv13pa-a Firmware

Xiongmaitech Ipg-53hv13pa-a

Xiongmaitech Ipg-53hv13pa-s Firmware

Xiongmaitech Ipg-53hv13pa-s

Xiongmaitech Ipm-50hv20pe-wr Firmware

Xiongmaitech Ipm-50hv20pe-wr

Xiongmaitech Ipg-50hv10pt-a Firmware

Xiongmaitech Ipg-50hv10pt-a

Xiongmaitech Ipg-50hv10pt-s Firmware

Xiongmaitech Ipg-50hv10pt-s

Xiongmaitech Ipg-50hv10pv-a Firmware

Xiongmaitech Ipg-50hv10pv-a

Xiongmaitech Ipg-50hv10pv-s Firmware

Xiongmaitech Ipg-50hv10pv-s

Xiongmaitech Ipg-80h20pt-a Firmware

Xiongmaitech Ipg-80h20pt-a

Xiongmaitech Ipg-80h20pt-s Firmware

Xiongmaitech Ipg-80h20pt-s

Xiongmaitech Ipg-50h20pt-s Firmware

Xiongmaitech Ipg-50h20pt-s

Xiongmaitech Ipg-53h20py-s Firmware

Xiongmaitech Ipg-53h20py-s

Xiongmaitech Ipg-53h13pe-wk-4f Firmware

Xiongmaitech Ipg-53h13pe-wk-4f

Xiongmaitech Ipg-83h20pa-a Firmware

Xiongmaitech Ipg-83h20pa-a

Xiongmaitech Ipg-83h20pa-s Firmware

Xiongmaitech Ipg-83h20pa-s

Xiongmaitech Ipg-50hv20psa-s Firmware

Xiongmaitech Ipg-50hv20psa-s

Xiongmaitech Ipg-50hv20psb-a Firmware

Xiongmaitech Ipg-50hv20psb-a

Xiongmaitech Ipg-50hv20psb-s Firmware

Xiongmaitech Ipg-50hv20psb-s

Xiongmaitech Ivg-hp203y-ae Firmware

Xiongmaitech Ivg-hp203y-ae

Xiongmaitech Ivg-hp203y-se Firmware

Xiongmaitech Ivg-hp203y-se

Xiongmaitech Ipg-hp500nr-s Firmware

Xiongmaitech Ipg-hp500nr-s

Xiongmaitech Ipg-80he20ps-s Firmware

Xiongmaitech Ipg-80he20ps-s

Event History

Dec 20, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-16725?

CVE-2017-16725 is classified as a high-severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2017-16725?

To mitigate CVE-2017-16725, users should update their Xiongmai Technology IP Cameras and DVRs to the latest firmware version provided by the manufacturer.

What products are affected by CVE-2017-16725?

CVE-2017-16725 affects various models of Xiongmai Technology IP Cameras and DVRs that utilize the NetSurveillance Web interface.

What type of vulnerability is CVE-2017-16725?

CVE-2017-16725 is a stack-based buffer overflow vulnerability that can lead to unauthorized code execution.

What are the consequences of CVE-2017-16725 if exploited?

If exploited, CVE-2017-16725 may allow attackers to execute arbitrary code remotely, leading to device crashes or unauthorized control.