CVE-2014-4880
Hikvision DVR DS-7204 Firmware 2.2.10 build 131009 - Remote Code Execution via RTSP PLAY Authorization Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-4880.
PoCs published by Metasploit, including Metasploit module exploits/linux/misc/hikvision_rtsp_bof.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Hikvision DVR RTSP request parsing to achieve remote code execution. It uses a ROP chain to bypass stack protections and execute arbitrary payloads on vulnerable devices.
Description
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.
Exploits (2)
This Metasploit module exploits a buffer overflow in Hikvision DVR RTSP request parsing to achieve remote code execution. It uses a ROP chain to bypass stack protections and execute arbitrary payloads on vulnerable devices.
This Metasploit module exploits a buffer overflow in Hikvision DVR RTSP request parsing (CVE-2014-4880) to achieve remote code execution on vulnerable devices. It uses ROP techniques to bypass stack randomization and execute payloads on ARMLE architecture.