CVE-2021-32941

moderate-risk
Published 2022-05-23

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

Do I need to act?

~
1.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.4/10 Critical
NETWORK / LOW complexity

Affected Products (3)

N48Pbb Firmware
N48Pbb Firmware
N48Pbb Firmware

Affected Vendors

Annke

References (2)

Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02
Third Party Advisory https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-02
44
/ 100
moderate-risk
Severity 31/34 · Critical
Exploitability 4/34 · Minimal
Exposure 9/34 · Low