What’s Vulnerable › Vulnerabilities
CVE-2017-16725
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 9.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-12-20 · updated 2026-06-17
- Weakness: CWE-119
Description
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
Affected products
- Xiongmaitech Ahb7004T-G-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-Gl-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-Gs-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-H-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-Lm-V3 Firmware: 4.02.r11.3070
- Xiongmaitech Ahb7004T-Lme-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-Mh-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7004T-Mh-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008F2-G-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008F2-H Firmware: 4.02.r11.3070
- Xiongmaitech Ahb7008F4-G-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008F4-H Firmware: 4.02.r11.3070
- Xiongmaitech Ahb7008F8-G-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008F8-H Firmware: 4.02.r11.3070
- Xiongmaitech Ahb7008T-Gl-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-Gs-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-H-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-Lm-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-Lm-V3 Firmware: 4.02.r11.3070
- Xiongmaitech Ahb7008T-Lme-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-Mh-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T-Mh-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7008T4-H-V2: _firmware-4.02.r11.7601
- Xiongmaitech Ahb7008T4-H-V2 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016F2-Gl-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016F4-Gl-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016F8-Gl-V4 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016F8-Gs-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016T-Gs-V3 Firmware: 4.02.r11.7601
- Xiongmaitech Ahb7016T-Lm-V2 Firmware: 4.02.r11.7601
References
- http://www.securityfocus.com/bid/102125
- https://ics-cert.us-cert.gov/advisories/ICSA-17-341-01
- http://www.securityfocus.com/bid/102125
- https://ics-cert.us-cert.gov/advisories/ICSA-17-341-01
Get alerted when CVE-2017-16725 or the next vulnerability affects your stack