CVE-2024-51347

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-51347", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-03-25T17:41:23.339Z", "dateReserved": "2024-10-28T00:00:00.000Z", "datePublished": "2026-03-25T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-25T13:30:50.348Z"}, "descriptions": [{"lang": "en", "value": "A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md"}, {"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/tree/main"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "references": [{"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-25T17:41:18.931017Z", "id": "CVE-2024-51347", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-25T17:41:23.339Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-51347", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-25T17:41:18.931017Z"}}}], "references": [{"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md", "tags": ["exploit"]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-25T17:41:12.833Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md"}, {"url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/tree/main"}], "descriptions": [{"lang": "en", "value": "A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-25T13:30:50.348Z"}}}, "cveMetadata": {"cveId": "CVE-2024-51347", "state": "PUBLISHED", "dateUpdated": "2026-03-25T17:41:23.339Z", "dateReserved": "2024-10-28T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-25T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de b\u00fafer en el binario dgiot en LSC Smart Indoor IP Camera V7.6.32. La falla existe en el manejo del par\u00e1metro de Zona Horaria (TZ) dentro de la interfaz de configuraci\u00f3n ONVIF. El par\u00e1metro de zona horaria (TZ) no tiene su longitud correctamente validada antes de ser copiado en un b\u00fafer de tama\u00f1o fijo utilizando la funci\u00f3n strcpy insegura."}], "id": "CVE-2024-51347", "lastModified": "2026-06-17T08:05:37.477", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-51347", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-25T17:41:18.931017Z", "version": "2.0.3"}}]}, "published": "2026-03-25T14:16:29.097", "references": [{"source": "cve@mitre.org", "url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md"}, {"source": "cve@mitre.org", "url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/tree/main"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/victorGoeman/LSC-Indoor-Camera-Security-Research/blob/main/CVE-2024-51347.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.6.32"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 87.0, "source": "matching"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "smart_connect_indoor_ip_camera", "vendor": "lsc"}], "analysis": {"en": {"generated_at": "2026-03-25T20:52:03.528293+00:00", "value": {"mitigation_remediation": ["Apply a firmware update that fixes the ONVIF TZ handling bug, if one is released by the vendor.", "If an update is unavailable, restrict access to the ONVIF configuration service using firewall rules or network segmentation.", "Disable the ONVIF configuration service altogether if remote configuration is not required.", "Verify the firmware version on each camera and monitor vendor advisories for future patches."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The only vendor and product explicitly mentioned is the LSC Smart Indoor IP Camera running firmware version 7.6.32. No other Siemens or third\u2011party devices are noted, and no later firmware revisions are listed as covered by this advisory.", "description_and_impact": "A buffer overflow exists in the dgiot binary of the LSC Smart Indoor IP Camera firmware. The flaw appears when the Time Zone (TZ) parameter from the ONVIF configuration interface is processed. Because the length of this string is not validated before copying into a fixed\u2011size buffer with an insecure strcpy call, a crafted TZ value can overwrite adjacent memory. This uncontrolled write is a classic CWE\u2011120 condition that could allow an attacker to alter program flow and execute arbitrary code, thereby compromising the confidentiality, integrity, and availability of the camera system.", "risk_and_exploitability": "The CVSS base score of 7.2 indicates high severity. EPSS information is not available, and the vulnerability is not listed in CISA\u2019s KEV catalog. Based on the description, it is inferred that the attack vector is remote over the network, likely targeting the ONVIF management endpoint. An attacker with network reach could send a malicious TZ value in an HTTP request to trigger the overflow. While no wild\u2011field exploitation has been documented, the vulnerability is theoretically exploitable with modest effort and is the type that can be chained with other camera\u2011specific weaknesses."}}}}, "created": "2026-03-25T20:57:08.054997+00:00", "title": "Buffer Overflow in LSC Smart Indoor IP Camera ONVIF Time Zone Configuration", "updated": "2026-03-26T11:51:37.271765+00:00", "vendors": ["lsc", "lsc$PRODUCT$smart_connect_indoor_ip_camera"]}