CVE-2024-3506

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Oct 8, 2024
Updated: Oct 10, 2024
CWE ID 311

Summary

CVE-2024-3506 is a newly identified buffer overflow vulnerability that affects select camera drivers in Milestone Systems' XProtect Device Pack. An attacker with access to an internal network can exploit this flaw to execute commands on the Recording Server, provided specific conditions are met. This issue poses a potential risk to organizations utilizing these vulnerable camera drivers and the associated recording server software. It is crucial for affected organizations to apply the necessary patches as soon as they become available to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share