CVE-2024-52544

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

CVSS 9.8 CRITICALEPSS 1.1%CWE-121

An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Lorex · 2K Indoor Wi-Fi Security Camera

public PoCs found — 1

cve_referencegithub.com/sfewer-r7/LorexExploitunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/sfewer-r7/LorexExploit https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/