CVE Feed

    Dashboard / CVE / CVE-2014-10011

    CVE-2014-10011

    Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.

    Published:Jan 13, 2015
    Last Modified:Apr 12, 2025
    EPS:Jan 13, 2015
    EPSS Score:0.1644
    CVSS Score:7.5

    Affected Products

    Vendor
    Trendnet
    Product
    Tv-ip422w
    Vendor
    Trendnet
    Product
    Tv-ip422wn

    Exploits

    http://www.securityfocus.com/bid/71292http://www.zeroscience.mk/codes/trendnet_bof.txthttp://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5211.phphttp://www.securityfocus.com/bid/71292http://www.zeroscience.mk/codes/trendnet_bof.txthttp://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5211.phphttps://www.exploit-db.com/exploits/35363

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High