Vulnerabilities > Xiongmaitech > High

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-39068 Classic Buffer Overflow vulnerability in Xiongmaitech Nb080S09S-Klc Firmware and Nbd80N32Ra-Kl-V3 Firmware
Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of service via a crafted request to the service.XM component.
network
low complexity
xiongmaitech CWE-120
7.5
2022-12-01 CVE-2022-45045 OS Command Injection vulnerability in Xiongmaitech products
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019.
network
low complexity
xiongmaitech CWE-78
8.8
2022-11-14 CVE-2021-38827 Authentication Bypass by Capture-replay vulnerability in Xiongmaitech Xm-Jpr2-Lx Firmware 4.02.R12.A6420987.10002.147502.00000
Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover.
high complexity
xiongmaitech CWE-294
7.5
2022-03-28 CVE-2022-26259 Classic Buffer Overflow vulnerability in Xiongmaitech products
A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.
local
low complexity
xiongmaitech CWE-120
7.8