CVE-2021-32941

critical · 9.4

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

9.4

CVSS

14.6%

EPSS (exploit prob.)

96th

EPSS percentile

2022-05-23

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Weaknesses

CWE-121CWE-787

Affected products

Vendor	Product	Affected versions
annke	n48pbb_firmware	< 3.4.106
annke	n48pbb_firmware	3.4.106
annke	n48pbb_firmware	3.4.106
annke	n48pbb	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02
https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-32941