| Package | Affected versions | Patched versions |
|---|---|---|
| deviceviewer | = 3.12.0.1 |
Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free