CVE-2022-26259

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-26259
A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/ Exploit Third Party Advisory
https://www.xiongmaitech.com/en/index.php/service/notice_info/51/2 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:xiongmaitech:nbd80x16s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x16s-kl:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:xiongmaitech:nbd80x08s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x08s-kl:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:xiongmaitech:ahb80x04r-mh_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04r-mh:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:xiongmaitech:ahb80x04r-mh-v2_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04r-mh-v2:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:xiongmaitech:ahb80x04-r-mh-v3_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04-r-mh-v3:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:xiongmaitech:ahb80n16t-gs_firmware:4.03.r11.7601.nat.onvifc.20211223:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80n16t-gs:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:xiongmaitech:ahb80n32f4-lme_firmware:4.03.r11.7601.nat.onvifc.20211228:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80n32f4-lme:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:xiongmaitech:nbd90s0vt-qw_firmware:4.03.r11.713g.nat.onvifc.2021:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd90s0vt-qw:-:*:*:*:*:*:*:*
History

04 Apr 2022, 20:40

Type Values Removed Values Added
References (MISC) https://www.xiongmaitech.com/en/index.php/service/notice_info/51/2 - (MISC) https://www.xiongmaitech.com/en/index.php/service/notice_info/51/2 - Vendor Advisory
References (MISC) https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/ - (MISC) https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/ - Exploit, Third Party Advisory
CWE CWE-120
CPE cpe:2.3:h:xiongmaitech:nbd90s0vt-qw:-:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04r-mh:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:nbd80x09ra-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x08s-kl:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:ahb80n32f4-lme_firmware:4.03.r11.7601.nat.onvifc.20211228:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x16s-kl:-:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x09s-kl:-:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80n32f4-lme:-:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04r-mh-v2:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:ahb80n16t-gs_firmware:4.03.r11.7601.nat.onvifc.20211223:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:nbd80x09s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:nbd80x09ra-kl:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:nbd80x08s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:nbd90s0vt-qw_firmware:4.03.r11.713g.nat.onvifc.2021:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:ahb80x04-r-mh-v3_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80x04-r-mh-v3:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:ahb80x04r-mh-v2_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:nbd80x16s-kl_firmware:4.03.r11.nat.dss.onvifc.20210727:*:*:*:*:*:*:*
cpe:2.3:h:xiongmaitech:ahb80n16t-gs:-:*:*:*:*:*:*:*
cpe:2.3:o:xiongmaitech:ahb80x04r-mh_firmware:4.03.r11.nat.dss.onvifc.20210729:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : 4.6
v3 : 7.8
First Time Xiongmaitech ahb80x04r-mh Firmware
Xiongmaitech ahb80x04r-mh
Xiongmaitech nbd90s0vt-qw
Xiongmaitech
Xiongmaitech ahb80x04-r-mh-v3
Xiongmaitech ahb80n32f4-lme
Xiongmaitech nbd80x16s-kl Firmware
Xiongmaitech ahb80x04r-mh-v2
Xiongmaitech nbd80x09s-kl Firmware
Xiongmaitech nbd80x08s-kl
Xiongmaitech nbd90s0vt-qw Firmware
Xiongmaitech nbd80x09s-kl
Xiongmaitech nbd80x08s-kl Firmware
Xiongmaitech ahb80n16t-gs
Xiongmaitech nbd80x09ra-kl Firmware
Xiongmaitech ahb80n16t-gs Firmware
Xiongmaitech nbd80x16s-kl
Xiongmaitech nbd80x09ra-kl
Xiongmaitech ahb80x04r-mh-v2 Firmware
Xiongmaitech ahb80x04-r-mh-v3 Firmware
Xiongmaitech ahb80n32f4-lme Firmware

28 Mar 2022, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-03-28 01:15

Updated : 2023-12-10 14:22

NVD link : CVE-2022-26259

Mitre link : CVE-2022-26259

CVE.ORG link : CVE-2022-26259

JSON object : View

Products Affected

xiongmaitech

  • nbd80x16s-kl_firmware
  • nbd90s0vt-qw
  • ahb80x04r-mh
  • nbd80x16s-kl
  • nbd80x09s-kl_firmware
  • ahb80n16t-gs
  • nbd80x09s-kl
  • nbd80x09ra-kl_firmware
  • ahb80x04r-mh_firmware
  • nbd80x08s-kl
  • ahb80x04-r-mh-v3_firmware
  • nbd90s0vt-qw_firmware
  • nbd80x09ra-kl
  • ahb80x04r-mh-v2_firmware
  • ahb80n32f4-lme_firmware
  • ahb80n16t-gs_firmware
  • ahb80n32f4-lme
  • ahb80x04r-mh-v2
  • ahb80x04-r-mh-v3
  • nbd80x08s-kl_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')