Remote Stack-Based Buffer Overflow in Vivotek SD9364 Security Camera

CVE-2024-7441

What is CVE-2024-7441?

A significant vulnerability exists in the Vivotek SD9364 camera affecting the httpd component. By manipulating the Content-Length argument, an attacker can trigger a stack-based buffer overflow, enabling potential remote code execution. The vulnerability is particularly concerning as it affects a product that is no longer supported, leaving users vulnerable to exploitation. The public disclosure of this exploit increases the urgency for affected users to take precautions. The vendor has acknowledged that the affected version is classified as end-of-life, reinforcing the need for users to assess their security posture and consider upgrading their systems to maintain protection.

References