CVE-2020-24055 : What You Need to Know

Verint 5620PTZ and Verint 4320 cameras are vulnerable to a stack buffer overflow due to an autodiscovery service listening on port TCP 6666 without authentication.

Understanding CVE-2020-24055

Verint cameras are susceptible to a stack buffer overflow through an autodiscovery service.

What is CVE-2020-24055?

The Verint 5620PTZ and Verint 4320 cameras have a service that can be exploited by attackers due to a stack buffer overflow vulnerability.

The Impact of CVE-2020-24055

This vulnerability allows unauthorized individuals to potentially execute malicious code on the affected cameras.

Technical Details of CVE-2020-24055

The autodiscovery service on Verint cameras is the source of the vulnerability.

Vulnerability Description

The autodiscovery service implemented in the binary executable '/usr/sbin/DM' on Verint cameras is vulnerable to a stack buffer overflow.

Affected Systems and Versions

Verint 5620PTZ with firmware version Verint_FW_0_42
Verint 4320 with firmware versions V4320_FW_0_23 and V4320_FW_0_31

Exploitation Mechanism

Attackers can exploit the autodiscovery service listening on port TCP 6666 without requiring any authentication.

Mitigation and Prevention

Steps to secure the affected Verint cameras.

Immediate Steps to Take

Disable the autodiscovery service on the cameras if possible.
Implement network segmentation to isolate the cameras from potentially malicious actors.

Long-Term Security Practices

Regularly update camera firmware to patch known vulnerabilities.
Conduct security assessments and penetration testing on the camera systems.

Patching and Updates

Apply firmware updates provided by Verint to address the stack buffer overflow vulnerability.