CVE-2020-15956

HIGH 7.5CVE-2020-15956 · Published 04/08/2020 · updated 17/06/2026

In short

CVE-2020-15956 is a HIGH (CVSS 7.5) vulnerability affecting nvr (acti).
Chance of exploitation in the next 30 days (EPSS): 16.2%, higher than 96.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nvr acti	`= 2.3.04.07= 3.0.12.42`	No fix yet

Description

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload.

References

packetstormsecurity.com/files/158771/ACTi-NVR3-Standard-Professional-Server-3.0.12.42-Denial-Of-Service.html · Exploit
megamagnus/cve-2020-15956 · Exploit
www2.acti.com/nvr3 · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free