CVE-2024-51347 - Vulnerability Analysis

Overview

LSC Smart Indoor IP Camera V7.6.32 contains a buffer overflow caused by improper length validation of the Time Zone (TZ) parameter in the ONVIF configuration interface, letting attackers cause memory corruption remotely, exploit requires network access.

Severity & Score

Impact

Attackers can cause memory corruption leading to potential remote code execution or device crash.

Mitigation

Update to the latest version with the vulnerability fixed.

References

• https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md
• https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/tree/main

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner