RTSP: Hikvision DVR RTSP Request Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Hikvision DVR. A successful attack can lead to arbitrary code execution.
Extended Description
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request with a long Authorization header.
References
CVE: CVE-2014-4880
Short Name
RTSP:HIKVISION-DVR-RCE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
RTSP
Keywords
CVE-2014-4880 Code DVR Execution Hikvision RTSP Remote Request
Release Date
10/03/2017
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
CVSS Score
7.5