© 2026 vulntracker.io

CVE-2019-11878

N/A

Published: May 10, 2019 at 02:24 PM UTC

Updated: June 17, 2026 at 02:13 AM UTC

2 products affected across 1 vendorBesder IP20H1 FirmwareBesder Ip20H1

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.9%

Description

An issue was discovered on XiongMai Besder IP20H1 V4.02.R12.00035520.12012.047500.00200 cameras. An attacker on the same local network as the camera can craft a message with a size field larger than 0x80000000 and send it to the camera, related to an integer overflow or use of a negative number. This then crashes the camera for about 120 seconds.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Besder IP20H1 Firmware · Xiongmaitech

95%

4.02.r12.00035520.12012.047500.00200

xiongmaitech-besder-ip20h1 (same device)

Besder Ip20H1 · Xiongmaitechdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

x_refsource_MISCExploitThird Party Advisory

Source: [email protected]

http://blog.0x42424242.in/2019/04/besder-investigative-journey-part-1_24.html

x_refsource_MISCExploitThird Party Advisory

Source: [email protected]

https://www.youtube.com/watch?v=SnyPJtDDMFQ

CVSS

3.3LOW[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-190

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card