Buffer Overflow Vulnerability in NVR WebViewer on Hanwah Techwin Devices
CVE-2019-12223

7.5HIGH

Key Information:

Vendor

Hanwha-security

Status
Srn-472s Firmware
Vendor
CVE Published:
5 September 2019

What is CVE-2019-12223?

An issue has been identified in the NVR WebViewer of Hanwah Techwin's SRN-472s and other SRN-x series devices, where submitting a username exceeding 117 characters triggers a buffer overflow. This vulnerability affects the main control process of the DVR system, leading to crashes and subsequent reboots. As a result, services become unavailable during these reboot operations, and repeated exploitation may continuously impair system availability if the attacker maintains network access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.hanwha-security.com/en/products/video-recorde...
x_refsource_MISC
https://medium.com/%40noe.dustin/samsung-webviewer-remote...
x_refsource_MISC
https://gist.github.com/dustinnoe/66f91573a0080c9fb2c2181...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.