CVE-2019-9677

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18, 2019.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Sep 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-96787.5Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a CVE-2019-96798.8Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affecte CVE-2019-96805.3Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by const CVE-2019-96815.3Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing CVE-2019-96828.1Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal CVE-2019-96868.8pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized CVE-2019-96879.8PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.CVE-2019-96888.8sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.CVE-2019-96897.5process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake mes CVE-2019-96926.5class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension CVE-2019-96938.8In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _upd CVE-2019-96947.8Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue wh