CVE-2017-16725: Xiongmaitech AHB7004T-G-v4 Firmware

Critical severity, CVSS 9.8. EPSS: 9.2% chance of exploitation in the next 30 days.

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the device restores itself to a more vulnerable state in which Telnet is accessible.

Affected products

• Xiongmaitech AHB7004T-G-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-Gl-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-Gs-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-H-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-Lm-v3 Firmware: version 4.02.r11.3070 only
• Xiongmaitech AHB7004T-Lme-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-Mh-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7004T-Mh-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008F2-G-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008F2-H Firmware: version 4.02.r11.3070 only
• Xiongmaitech AHB7008F4-G-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008F4-H Firmware: version 4.02.r11.3070 only
• Xiongmaitech AHB7008F8-G-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008F8-H Firmware: version 4.02.r11.3070 only
• Xiongmaitech AHB7008T-Gl-v4 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-Gs-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-H-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-Lm-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-Lm-v3 Firmware: version 4.02.r11.3070 only
• Xiongmaitech AHB7008T-Lme-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-Mh-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T-Mh-v3 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7008T4-H-v2: version _firmware only
• Xiongmaitech AHB7008T4-H-v2 Firmware: version 4.02.r11.7601 only
• Xiongmaitech AHB7016F2-Gl-v4 Firmware: version 4.02.r11.7601 only
• and 111 more

Published 2017-12-20. Last modified 2026-06-17.