CVE-2019-11878
Xiongmai
- Published
- 10 May 2019
- Last modified
- 17 June 2026
- CVSS
- 6.5 v3.0
- Severity
- medium
- EPSS
- 0.9% (58th pct)
- CISA KEV
- Not listed
- NVD status
- Modified
- Weaknesses
- CWE-190
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds.
Exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalogue as of 2026.09.04. That is an absence of confirmed public exploitation, not evidence that exploitation has not occurred. EPSS models a 0.9% probability of exploitation activity in the next 30 days.
Affected products
| Product | Vendor | Type | Versions named |
|---|---|---|---|
| Besder Ip20h1 | Xiongmai | unknown | 4.02.r12.00035520.12012.047500.00200 |
References
- http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html exploit
- https://www.youtube.com/watch?v=SnyPJtDDMFQ exploit
- http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html exploit
- https://www.youtube.com/watch?v=SnyPJtDDMFQ exploit
Record assembled from NVD, CISA KEV 2026.09.04 and FIRST EPSS 2026-09-04. Affected products are those NVD's CPE configuration names that fall inside this site's scope; a CVE may affect products outside it.