CVE-2020-15956

This PoC exploits a Denial of Service (DoS) vulnerability in ACTi NVR3 servers by sending a malformed authentication request with an oversized payload to the '/Media/UserGroup/login' endpoint. The exploit continuously sends requests to crash the target service.

This PoC exploits a buffer overflow vulnerability in ACTi NVR servers by sending a malformed 760-byte authorization header to the Media Server, causing a denial of service (DoS) by crashing ActiveMediaServer.exe. The exploit is straightforward and repeatedly sends the payload to maintain the DoS condition.