Hanwha Vision HRX-1620 up to 3.05.62 HTTP Header stack-based overflow

Summaryinfo

A vulnerability was found in Hanwha Vision HRX-1620 up to 3.05.62. It has been declared as critical. This vulnerability affects unknown code of the component HTTP Header Handler. Such manipulation leads to stack-based overflow. This vulnerability is referenced as CVE-2023-6095. It is possible to launch the attack remotely. No exploit is available. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Hanwha Vision HRX-1620 up to 3.05.62. Affected by this issue is some unknown processing of the component HTTP Header Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability. CVE summarizes:

Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

The advisory is shared for download at hanwhavision.com. This vulnerability is handled as CVE-2023-6095 since 11/13/2023. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

Applying a patch is able to eliminate this problem.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Hanwha Vision

Name

• HRX-1620

Version

• 3.05.0
• 3.05.1
• 3.05.2
• 3.05.3
• 3.05.4
• 3.05.5
• 3.05.6
• 3.05.7
• 3.05.8
• 3.05.9
• 3.05.10
• 3.05.11
• 3.05.12
• 3.05.13
• 3.05.14
• 3.05.15
• 3.05.16
• 3.05.17
• 3.05.18
• 3.05.19
• 3.05.20
• 3.05.21
• 3.05.22
• 3.05.23
• 3.05.24
• 3.05.25
• 3.05.26
• 3.05.27
• 3.05.28
• 3.05.29
• 3.05.30
• 3.05.31
• 3.05.32
• 3.05.33
• 3.05.34
• 3.05.35
• 3.05.36
• 3.05.37
• 3.05.38
• 3.05.39
• 3.05.40
• 3.05.41
• 3.05.42
• 3.05.43
• 3.05.44
• 3.05.45
• 3.05.46
• 3.05.47
• 3.05.48
• 3.05.49
• 3.05.50
• 3.05.51
• 3.05.52
• 3.05.53
• 3.05.54
• 3.05.55
• 3.05.56
• 3.05.57
• 3.05.58
• 3.05.59
• 3.05.60
• 3.05.61
• 3.05.62

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion