IoT & Hardware
Memory Corruption
Trendnet wireless camera buffer overflow vulneribility
TrendNet wireless camera buffer overflow vulneribility TrendNet ProView Wireless camera TV-IP512WN (version v1.0R) is vulnerable to buffer overflow in handling RTSP packet in firmware version 1.0.4…
.png)
Overview
TrendNet wireless camera buffer overflow vulneribility
TrendNet ProView Wireless camera TV-IP512WN (version v1.0R) is vulnerable to buffer overflow in handling RTSP packet in firmware version 1.0.4 which may result in remote code execution or denial of service. The issue is in the binary rtspd which resides in /sbin folder which is responsible for serving rtsp connection received by the device. The problem arises in parsing “Authorization: Basic” RTSP header which could be arbitrarily long, the value of this header is copied onto stack memory without any bounds check which could lead to a buffer overflow. What makes this vulnerability more severe is that the user need not be authenticated to trigger the overflow.
Vulnerability details
TrendNet wireless camera buffer overflow vulneribility TrendNet ProView Wireless camera TV-IP512WN (version v1.0R) is vulnerable to buffer overflow in handling RTSP packet in firmware version 1.0.4 which may result in remote code execution or denial of
Disclosure timeline
2020-01-13 Report the issue to the vendor
2020-01-14 Vendor responded they provide fix for product has reached End-of-Life
2020-01-15 Informed the vendor that if they don’t fix the issue in 90 days we will publish the full disclosure unless they responded otherwise
2020-03-18 Requested CVE ID for the vulnerability
2020-03-18 Vendor responded they don’t verify the vulnerability which has reached EOF
2020-05-09 Requested Program Root CNA for CVE ID
2020-05-10 CVE ID Reserved
2020-05-11 Published the full disclosure
References
2026-06-17 (NVD record)
Credits
Munawwar Hussain Shelia
Related Advisories
Adobe Reader Out-Of-Bounds Read Information Disclosure Vulnerability
Concerned about a similar issue in your product?
Payatu's researchers find these vulnerabilities before attackers do. Talk to us about product, firmware and IoT security testing.
