ID
VAR-202008-0808
CVE
CVE-2020-3507
TITLE
Cisco Video Surveillance 8000 series IP Camera input verification vulnerability
Trust: 0.8
DESCRIPTION
Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to missing checks when the IP cameras process a Cisco Discovery Protocol packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol packet to the targeted IP camera. A successful exploit could allow the attacker to execute code on the affected IP camera or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
| category: | ['camera device'] | sub_category: | IP camera | Trust: 0.1 |
AFFECTED PRODUCTS
| vendor: | cisco | model: | 8000p ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8020 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8070 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8620 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8400 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8030 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8930 speed dome ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | cisco | model: | 8630 ip camera | scope: | eq | version: | 1.0.9-1 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8000p ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8020 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8030 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8070 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8400 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8620 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8630 ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco video surveillance 8930 speed dome ip カメラ | scope: | - | version: | - | Trust: 0.8 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | eq | version: | 8000<1.0.9-4 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-20 | Trust: 1.0 |
| problemtype: | Incorrect input confirmation (CWE-20) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
remote or local
Trust: 0.6
TYPE
input validation error
Trust: 0.6
PATCH
| title: | cisco-sa-ipcameras-rce-dos-uPyJYxN3 | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcameras-rce-dos-uPyJYxN3 | Trust: 0.8 |
| title: | Patch for Cisco Video Surveillance 8000 Series IP Cameras remote code execution vulnerability (CNVD-2020-52367) | url: | https://www.cnvd.org.cn/patchInfo/show/234253 | Trust: 0.6 |
| title: | Cisco Video Surveillance 8000 Series IP Cameras Enter the fix for the verification error vulnerability | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=126754 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-3507 | Trust: 3.1 |
| db: | JVNDB | id: | JVNDB-2020-010680 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2020-52367 | Trust: 0.6 |
| db: | NSFOCUS | id: | 48668 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2020.2854 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202008-958 | Trust: 0.6 |
| db: | OTHER | id: | NONE | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ipcameras-rce-dos-upyjyxn3 | Trust: 2.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-3507 | Trust: 2.0 |
| url: | http://www.nsfocus.net/vulndb/48668 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2020.2854/ | Trust: 0.6 |
| url: | https://ieeexplore.ieee.org/abstract/document/10769424 | Trust: 0.1 |
SOURCES
| db: | OTHER | id: | - |
| db: | CNVD | id: | CNVD-2020-52367 |
| db: | JVNDB | id: | JVNDB-2020-010680 |
| db: | CNNVD | id: | CNNVD-202008-958 |
| db: | NVD | id: | CVE-2020-3507 |
LAST UPDATE DATE
2025-01-30T21:22:35.261000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2020-52367 | date: | 2020-09-16T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-010680 | date: | 2021-02-01T07:40:00 |
| db: | CNNVD | id: | CNNVD-202008-958 | date: | 2021-01-05T00:00:00 |
| db: | NVD | id: | CVE-2020-3507 | date: | 2024-11-21T05:31:12.853 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2020-52367 | date: | 2020-09-16T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-010680 | date: | 2021-02-01T00:00:00 |
| db: | CNNVD | id: | CNNVD-202008-958 | date: | 2020-08-19T00:00:00 |
| db: | NVD | id: | CVE-2020-3507 | date: | 2020-08-26T17:15:14.490 |