CVE Feed

    Dashboard / CVE / CVE-2022-26259

    CVE-2022-26259

    A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.

    Published:Mar 28, 2022
    Last Modified:Nov 21, 2024
    EPS:Mar 28, 2022
    EPSS Score:0.04277
    CVSS Score:7.8

    Affected Products

    Vendor
    Xiongmaitech
    Product
    Ahb80n16t-gs
    Vendor
    Xiongmaitech
    Product
    Ahb80n16t-gs Firmware
    Vendor
    Xiongmaitech
    Product
    Ahb80n32f4-lme
    Vendor
    Xiongmaitech
    Product
    Ahb80n32f4-lme Firmware
    Vendor
    Xiongmaitech
    Product
    Ahb80x04-r-mh-v3
    Vendor
    Xiongmaitech
    Product
    Ahb80x04-r-mh-v3 Firmware
    Vendor
    Xiongmaitech
    Product
    Ahb80x04r-mh
    Vendor
    Xiongmaitech
    Product
    Ahb80x04r-mh-v2
    Vendor
    Xiongmaitech
    Product
    Ahb80x04r-mh-v2 Firmware
    Vendor
    Xiongmaitech
    Product
    Ahb80x04r-mh Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x08s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x08s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x09ra-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x09ra-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x09s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x09s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd80x16s-kl
    Vendor
    Xiongmaitech
    Product
    Nbd80x16s-kl Firmware
    Vendor
    Xiongmaitech
    Product
    Nbd90s0vt-qw
    Vendor
    Xiongmaitech
    Product
    Nbd90s0vt-qw Firmware

    Exploits

    https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/https://blog.ret2.me/post/2022-01-26-exploiting-xiongmai-dvrs/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High