TB-eye Network and AHD Recorders Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in multiple models of TB-eye network recorders and AHD recorders, all running specific firmware versions or earlier. This vulnerability can cause the CGI process to crash unexpectedly by sending a specially crafted request.

Impact

Exploitation of this vulnerability leads to a classic buffer overflow, causing the CGI process to terminate abnormally.

Remediation

Users are advised to update the firmware to the latest version available. For those using the TB-eye cloud service, a system disruption has been acknowledged, and an apology has been issued.