CVE-2020-12763

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of service. The issue is in the binary rtspd (in /sbin) when parsing a long "Authorization: Basic" RTSP header.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-127645.3Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.CVE-2020-127655.3Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.CVE-2020-127669.8Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.CVE-2020-127675.5exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-127685.5An issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has a memory leak, aka CID-d80b64ff297e. NOTE: CVE-2020-127695.5An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw CVE-2020-12777.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatio CVE-2020-127706.7An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6 CVE-2020-127715.5An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing op CVE-2020-127728.8An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can include an IMG element wi CVE-2020-127738.8A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a defa CVE-2020-127746.7D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.