CVE-2023-39068

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Sep 11, 2023
Updated: Sep 14, 2023
CWE ID 120

Summary

CVE-2023-39068 is a buffer overflow vulnerability affecting the service.XM component in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin. An attacker can exploit this vulnerability by sending a crafted request to the affected system, resulting in a denial of service condition. The buffer overflow occurs due to improper handling of user input, potentially leading to memory corruption and system instability. This issue poses a significant risk to networks that utilize these affected network block devices and can be mitigated through applying the vendor-issued patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share