Vulnerabilities > CVE-2021-27232 - Out-of-bounds Write vulnerability in Pelco Digital Sentry Server 7.18.72.11464
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage using Internet Explorer where the exploit could be triggered.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |