Summary A buffer overflow in the onvif_discovery binary located at /bin/onvif_discovery which listens on UDP port 5001. This vulnerability can be leveraged by a network-adjacent attacker to execute arbitrary code on the target as root. No authentication is required to exploit this. Credit An independent security researcher, n4nika, working with SSD Secure Disclosure Vendor Response … Read More »
