Search/CVE-2022-26259
● CVE — High

CVE-2022-26259

VendorxiongmaitechProductahb80n16t-gs firmware, ahb80n32f4-lme firmware, ahb80x04-r-mh-v3 firmware, ahb80x04r-mh-v2 firmware, ahb80x04r-mh firmware, nbd80x08s-kl firmware, nbd80x09ra-kl firmware, nbd80x09s-kl firmware, nbd80x16s-kl firmware, nbd90s0vt-qw firmwareDiscoveredMar 28, 2022UpdatedNov 21, 2024

A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
2.38%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
11 relationships
Timeline
disclosure → media coverage
Mar 28, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024