Blog | G5 Cyber Security

Vulnerability Spotlight: TALOS-2018-0535 – Ocularis Recorder VMS_VA Denial of Service Vulnerability

Talos is disclosing a denial-of-service vulnerability in the Ocularis Recorder. A specially crafted TCP packet can cause a process to terminate, resulting in denial of service. The VMS_VA server process is listening for incoming TCP connections on a port in the range of 60801-65535. When a client connects to it and sends any unexpected data, the binary will respond with “Hello World!” The binary has a check to see if the receiving data starts with “dispose” If it does, the server process kills itself. There is no authentication required for this command to go through.”]

Source: https://blog.talosintelligence.com/2018/06/vulnerability-spotlight-talos-2018-0535.html

Exit mobile version