CVE-2024-51348

A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network range to overwrite the instruction pointer and achieve Remote Code Execution (RCE) by sending a specially crafted HTTP request.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/victorGoeman/BS-Producten-Petcam-Security-Research/blob/main/CVE-2024-51348.md
https://github.com/victorGoeman/BS-Producten-Petcam-Security-Research/blob/main/README.md

Configurations

No configuration.

History

19 May 2026, 18:08

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de desbordamiento de búfer basado en pila en el servicio API P2P en BS Producten Petcam con firmware 33.1.0.0818 permite a atacantes no autenticados dentro del alcance de la red sobrescribir el puntero de instrucción y lograr Ejecución Remota de Código (RCE) enviando una solicitud HTTP especialmente diseñada.

25 Mar 2026, 16:16

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8
CWE		CWE-121

25 Mar 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-25 14:16

Updated : 2026-06-17 08:05

NVD link : CVE-2024-51348

Mitre link : CVE-2024-51348

CVE.ORG link : CVE-2024-51348

JSON object : View

Products Affected

No product.

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2024-51348", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-51348", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-25T15:51:59.771321Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-03-25T14:16:29.210", "references": [{"url": "https://github.com/victorGoeman/BS-Producten-Petcam-Security-Research/blob/main/CVE-2024-51348.md", "source": "cve@mitre.org"}, {"url": "https://github.com/victorGoeman/BS-Producten-Petcam-Security-Research/blob/main/README.md", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network range to overwrite the instruction pointer and achieve Remote Code Execution (RCE) by sending a specially crafted HTTP request."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de b\u00fafer basado en pila en el servicio API P2P en BS Producten Petcam con firmware 33.1.0.0818 permite a atacantes no autenticados dentro del alcance de la red sobrescribir el puntero de instrucci\u00f3n y lograr Ejecuci\u00f3n Remota de C\u00f3digo (RCE) enviando una solicitud HTTP especialmente dise\u00f1ada."}], "lastModified": "2026-06-17T08:05:37.637", "sourceIdentifier": "cve@mitre.org"}