CVE-2017-16725
CriticalSummary
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. This vulnerability may allow an attacker to execute code remotely or crash the device.
Risk Assessment
An attacker may remotely take control of the device or cause it to crash, potentially leading to loss of access to recordings or data.
Recommendation
It is recommended to update the device firmware to the latest version and disable Telnet access to minimize risk.
Original NVD description (English source)
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.