A local buffer overflow vulnerability in Sricam DeviceViewer 3.12.0.1 enables authenticated attackers to bypass data execution prevention and execute arbitrary code on the host system.

The application is susceptible to a stack-based buffer overflow (CWE-121) within the user management add user function. An authenticated attacker can inject a malicious payload into the Username field to trigger the overflow and execute commands via a return oriented programming (ROP) chain.

A successful exploitation of this vulnerability allows an attacker to achieve code execution on the underlying system, which typically leads to a full system compromise. Given the CVSS score of 7.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of the affected workstation or server. Organizations relying on this software for camera management may face unauthorized access to security infrastructure and potential data theft.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the application to trusted personnel only and monitor for unauthorized user creation attempts.

Proactive Monitoring: Security teams should monitor system logs for suspicious process execution or attempts to modify user accounts within the Sricam DeviceViewer application.

Compensating Controls: Implement endpoint protection measures, such as modern memory protection features (e.g., hardware-enforced DEP or Control Flow Guard), to hinder the execution of ROP-based payloads.

Public Exploit Available: Yes, a functional exploit is available via ExploitDB (EDB-ID 47477).

The severity of this vulnerability, combined with the availability of a public exploit, necessitates immediate action to isolate affected systems. Administrators should prioritize migrating away from this software or restricting its execution environment until a vendor-supplied security update is made available. Failure to address this flaw leaves the host system vulnerable to complete compromise by any authenticated user.