Back to Database
Status published
High
CVE-2022-26259
A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL,...
Vulnerability Description
A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26259
Credits & Attribution
No credits recorded in the NVD database.
References
More from xiongmaitech
View All →CVE-2022-45460
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000,...
Unknown
0
CVE-2022-45045
Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000,...
Unknown
0
CVE-2021-41506
Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.02.R11.7601.Nat.Onvif.20170420,...
Critical
9.8
CVE-2021-38828
Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing....
Unknown
0
CVE-2021-38827
Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover....
Unknown
0
Affected Vendor
xiongmaitech
View all reports →Affected Software
nbd80x16s-kl firmware, nbd80x09s-kl firmware, nbd80x08s-kl firmware, nbd80x09ra-kl firmware, ahb80x04r-mh firmware, ahb80x04r-mh-v2 firmware, ahb80x04-r-mh-v3 firmware, ahb80n16t-gs firmware, ahb80n32f4-lme firmware, nbd90s0vt-qw firmware
Vulnerable Versions:
4.03.r11.nat.dss.onvifc.20210727, 4.03.r11.nat.dss.onvifc.20210729, 4.03.r11.7601.nat.onvifc.20211223, 4.03.r11.7601.nat.onvifc.20211228, 4.03.r11.713g.nat.onvifc.2021
Timeline
Official Publish:
March 28th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.