CVE-2021-27232 : faille élevée pelco digital sentry server (CVSS 8.8)

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage using Internet Explorer where the exploit could be triggered.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

16 févr. 2021

Dernière mise à jour

17 juin 2026

• pelco digital sentry server

• Fiche CVE-2021-27232 sur le NVD (NIST)
• github.com/vitorespf/Advisories/blob/master/Pelco_Digital…
• support.pelco.com/s/article/What…