INSTAR 2K+ and 4K Backend IPC Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in INSTAR 2K+ and 4K cameras running firmware version 3.11.1 Build 1124. This issue affects the Backend IPC Server component, where an unknown code manipulation leads to a crash of the camera, requiring a reboot for recovery. The vulnerability can be exploited remotely without authentication.

Impact

Exploitation of this vulnerability causes the camera to crash, disrupting its functionality and requiring a manual reboot to restore normal operation.

Remediation

Users are advised to apply the firmware update provided by INSTAR to address this vulnerability. Additionally, implementing restrictive firewall rules can help mitigate the risk of remote exploitation.