CVE-2014-1201

State: Published
Severity: Not scored
Published: Jan 15, 2014
Updated: Aug 6, 2024
Reserved: Jan 7, 2014

Description

Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20140110 [CVE -2014-1201] Lorex security DVR ActiveX control buffer overflowmailing-list
https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-testcase.html
https://github.com/pedrib/PoC/blob/master/lorexActivex/lorex-report.txt
lorex-cve20141201-bo(90223)vdb-entry
101903vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.