Published

13 January 2015

Last modified

17 June 2026

CVSS

7.5 v2.0

Severity

high

EPSS

10.1% (95th pct)

CISA KEV

Not listed

NVD status

Modified

Weaknesses

CWE-119

AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.

Exploitation

Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 10.1% probability of exploitation activity in the next 30 days, placing it in the top decile of all scored CVEs.

Affected products

References

• http://packetstormsecurity.com/files/129262/TRENDnet-SecurView-Wireless-Network-Camera-TV-IP422WN-Buffer-Overflow.html
• http://www.securityfocus.com/bid/71292 exploit
• http://www.zeroscience.mk/codes/trendnet_bof.txt exploit
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5211.php exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98948
• http://packetstormsecurity.com/files/129262/TRENDnet-SecurView-Wireless-Network-Camera-TV-IP422WN-Buffer-Overflow.html
• http://www.securityfocus.com/bid/71292 exploit
• http://www.zeroscience.mk/codes/trendnet_bof.txt exploit
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5211.php exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98948

CVE-2014-10011 at NVD

Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.