Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25062. PoCs published by Alessandro Magnosi.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in Sricam DeviceViewer 3.12.0.1 to achieve remote code execution (RCE) via a crafted username in the User Management section. It employs ROP (Return-Oriented Programming) to bypass DEP (Data Execution Prevention) and execute a command shell.
Description
A vulnerability was found in Sricam IP CCTV Camera and classified as critical. This issue affects some unknown processing of the component Device Viewer. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Exploits (1)
This exploit leverages a local buffer overflow in Sricam DeviceViewer 3.12.0.1 to achieve remote code execution (RCE) via a crafted username in the User Management section. It employs ROP (Return-Oriented Programming) to bypass DEP (Data Execution Prevention) and execute a command shell.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L