CVE-2021-32941

Annke Network Video Recorder - Stack-based Buffer Overflow

State: Published
Severity: 9.4 Critical
Published: May 23, 2022
Updated: Apr 16, 2025
Reserved: May 13, 2021

Description

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

Scores

CVSS	Score	Vector	Source
3.1	9.4 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H	icscert

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
N48PBB (NVR)Annke	All through V3.4.106 build 200422Affected

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.