CVE-2020-24055

CRITICAL

Verint 5620PTZ and 4320 Firmware - Unauthenticated Stack Buffer Overflow in Autodiscovery Service

Title source: llm
STIX 2.1

Description

Verint 5620PTZ Verint_FW_0_42 and Verint 4320 V4320_FW_0_23, and V4320_FW_0_31 units feature an autodiscovery service implemented in the binary executable '/usr/sbin/DM' that listens on port TCP 6666. The service is vulnerable to a stack buffer overflow. It is worth noting that this service does not require any authentication.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://ioac.tv/2Nbc40h

Scores

CVSS v3 9.8
EPSS 0.0162
EPSS Percentile 73.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (3)
verint/4320_firmware v4320_fw_0_23
verint/4320_firmware v4320_fw_0_31
verint/5620ptz_firmware verint_fw_0_42
Published Aug 21, 2020
Tracked Since Feb 18, 2026