VULNERABILITY INTELLIGENCE
CVE-2024-41882
EPSS probability0.83%
CISA KEVNot currently listed
Published2024-12-24
Last modified2026-06-17
Description
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Weakness classification
- fc9afe74-3f80-4fb7-a313-e6f036a89882: CWE-121