CVE-2014-1201

Lorex Edge Series - Buffer Overflow via HTTP_PORT Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-1201. PoCs published by Pedro Ribeiro.

AI-analyzed exploit summary This is a working proof-of-concept for a buffer overflow vulnerability in the Lorex Technologies INetViewX ActiveX control, allowing remote code execution via a long string in the HTTP_PORT parameter.

Description

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.

Exploits (1)

exploitdb WORKING POC

by Pedro Ribeiro · textdoshardware

https://www.exploit-db.com/exploits/43891

View Code ZIP pw:eip

This is a working proof-of-concept for a buffer overflow vulnerability in the Lorex Technologies INetViewX ActiveX control, allowing remote code execution via a long string in the HTTP_PORT parameter.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Lorex Technologies INetViewX ActiveX control (versions in EDGE series DVRs)

No auth needed

Prerequisites: Victim must use Internet Explorer and accept the ActiveX control installation · Attacker must deliver the malicious HTML file to the victim

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →