CVE-2020-24918

Katalog CVE

CVSS 9.8 · Critical EPSS 4,4%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada ambarella oryx rtsp server. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to execute arbitrary code in parse_authentication_header() in libamprotocol-rtsp.so.1 in rtsp_svc (or cause a crash). This allows remote takeover of a Furbo Dog Camera, for example. NOTE: The vendor states that the RTSP library is used for DEMO only, using it in product is a customer's behavior. Ambarella has emphasized that RTSP is DEMO only library, should NOT be used in product in our document. Because Ambarella's SDK is proprietary, we didn't publish our SDK source code in public network.

Rincian

Terbit di NVD

30 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

4,4% peluang dieksploitasi; lebih tinggi dari 91,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ambarella.com advisory vendor
• https://somersetrecon.squarespace.com/blog/2021/hacking-the-furbo-part-1 exploit · advisory pihak ketiga
• https://www.somersetrecon.com/blog exploit · advisory pihak ketiga
• https://github.com/Ambarella-Inc/amba-cve-info/tree/main/cve-2020-24918