A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function.
History

Thu, 26 Mar 2026 12:00:00 +0000

Type Values Removed Values Added
First Time appeared Lsc
Lsc smart Connect Indoor Ip Camera
Vendors & Products Lsc
Lsc smart Connect Indoor Ip Camera

Wed, 25 Mar 2026 22:00:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in LSC Smart Indoor IP Camera ONVIF Time Zone Configuration

Wed, 25 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 25 Mar 2026 14:00:00 +0000

Type Values Removed Values Added
Description A buffer overflow vulnerability in the dgiot binary in LSC Smart Indoor IP Camera V7.6.32. The flaw exists in the handling of the Time Zone (TZ) parameter within the ONVIF configuration interface. The time zone (TZ) parameter does not have its length properly validated before being copied into a fixed-size buffer using the insecure strcpy function.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-03-25T17:41:23.339Z

Reserved: 2024-10-28T00:00:00.000Z

Link: CVE-2024-51347

cve-icon Vulnrichment

Updated: 2026-03-25T17:41:12.833Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T14:16:29.097

Modified: 2026-03-25T18:16:24.673

Link: CVE-2024-51347

cve-icon Redhat

No data.