CVE-2014-1201
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Buffer overflow in the INetViewX ActiveX control in the Lorex Edge LH310 and Edge+ LH320 series with firmware 7-35-28-1B26E, Edge2 LH330 series with firmware 11.17.38-33_1D97A, and Edge3 LH340 series with firmware 11.19.85_1FE3A allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the HTTP_PORT parameter.
Affected Platforms (CPE)
📦
Lorex Technology
Edge Lh310 Firmware
= 7-35-28-1b26e🔌
Lorextechnology
Edge
= lh310📦
Lorex Technology
Edge3 Lh340 Firmware
= 11.19.85_1fe3a🔌
Lorextechnology
Edge3
= lh340📦
Lorex Technology
Edge2 Lh330 Firmware
= 11.17.38-33_1d97a🔌
Lorextechnology
Edge2
= lh330📦
Lorex Technology
Edge\+ Lh320 Firmware
= 7-35-28-1b26e🔌
Lorextechnology