CVE-2010-4230

CRITICAL 9.3CVE-2010-4230 · Published 17/11/2010 · updated 16/06/2026

In short

CVE-2010-4230 is a CRITICAL (CVSS 9.3) vulnerability affecting cmnc-200 firmware (camtron), cmnc-200 firmware (tecvoz).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cmnc-200 firmware camtron	`= 1.102a-008`	No fix yet
cmnc-200 firmware tecvoz	`= 1.102a-008`	No fix yet

Description

Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.

References

exploit-db.com/exploits/15504 · Exploit
securityfocus.com/archive/1/514753/100/0/threaded
trustwave.com/spiderlabs/advisories/TWSL2010-006.txt · Exploit

More vulnerabilities in cmnc-200 firmware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free