CVE-2018-25297
Buffer Overflow in Wansview 1.0.2 Causes Application Crash
Publication date: 2026-04-26
Last updated on: 2026-04-26
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wansview | wansview | 1.0.2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in Wansview 1.0.2 is a buffer overflow issue that occurs when local attackers supply oversized input strings. Specifically, attackers can inject payloads of up to 2000 bytes into the Camera name and DID number fields during the process of adding a camera. This causes the application to crash.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing local attackers to crash the Wansview application. The crash is triggered by injecting large input strings into certain fields, which may lead to denial of service or disruption of normal camera management operations.