CVE-2017-16725
9.8
CRITICAL · CVSS 3.0 · EPSS 9.2% (pctl 95)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 9.22% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2017-12-20 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| xiongmaitech | ahb7004t-h-v2 |
| xiongmaitech | ahb7004t-h-v2 firmware |
| xiongmaitech | ahb7004t-lm-v3 |
| xiongmaitech | ahb7004t-lm-v3 firmware |
| xiongmaitech | ahb7004t-mh-v2 |
| xiongmaitech | ahb7004t-mh-v2 firmware |
| xiongmaitech | ahb7008f2-h |
| xiongmaitech | ahb7008f2-h firmware |
| xiongmaitech | ahb7008f4-h |
| xiongmaitech | ahb7008f4-h firmware |
| xiongmaitech | ahb7008f8-h |
| xiongmaitech | ahb7008f8-h firmware |
| xiongmaitech | ahb7008t-h-v2 |
| xiongmaitech | ahb7008t-h-v2 firmware |
| xiongmaitech | ahb7008t-lm-v2 |
| xiongmaitech | ahb7008t-lm-v2 firmware |
| xiongmaitech | ahb7008t-lm-v3 |
| xiongmaitech | ahb7008t-lm-v3 firmware |
| xiongmaitech | ahb7008t-mh-v2 |
| xiongmaitech | ahb7008t-mh-v2 firmware |
| xiongmaitech | ahb7008t4-h-v2 |
| xiongmaitech | ahb7008t4-h-v2 firmware |
| xiongmaitech | ahb7016t-lm-v2 |
| xiongmaitech | ahb7016t-lm-v2 firmware |
| xiongmaitech | ahb7016t-lm-v3 |
| xiongmaitech | ahb7016t-lm-v3 firmware |
| xiongmaitech | ahb7016t-mh-v2 |
| xiongmaitech | ahb7016t-mh-v2 firmware |
| xiongmaitech | ahb7016t4-gs-v3 |
| xiongmaitech | ahb7016t4-gs-v3 firmware |
| xiongmaitech | ahb7016t4-mh-v2 |
| xiongmaitech | ahb7016t4-mh-v2 firmware |
| xiongmaitech | ahb7032f4-lm-v2 |
| xiongmaitech | ahb7032f4-lm-v2 firmware |
| xiongmaitech | ahb7032f8-lm-v2 |
| xiongmaitech | ahb7032f8-lm-v2 firmware |
| xiongmaitech | ahb7804r-ms-v3 |
| xiongmaitech | ahb7804r-ms-v3 firmware |
| xiongmaitech | ahb7808r-ms-v3 |
| xiongmaitech | ahb7808r-ms-v3 firmware |
References
→ the Explorer · watch your stack · NVD