CVE-2020-24214

2020-10-0612:58:05

mitre

www.cve.org

rtsp request buffer overflow

hisilicon iptv encoders

application crash

AI Score

9.6

Confidence

High

EPSS

0.022

Percentile

89.5%

JSON

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash. The device will not be able to perform its main purpose of video encoding and streaming for up to a minute, until it automatically reboots. Attackers can send malicious requests once a minute, effectively disabling the device.