Buffer Overflow Vulnerability in Dahua IP Camera Devices

CVE-2019-9676

What is CVE-2019-9676?

A buffer overflow vulnerability has been identified in specific Dahua IP Camera models that could allow attackers to exploit the device after local login. This vulnerability exists in the serial port printing functionality, which is not utilized by the core functions of the device. If successfully exploited, it could lead to unexpected device restarts or even arbitrary code execution. Dahua has taken steps to address this issue through a security audit and has released updated firmware versions that eliminate the affected functionality in newer devices.

References