CVE-2017-13719

CVE-2017-13719 describes a critical stack-based buffer overflow vulnerability in the Amcrest IPM-721S IP camera firmware (version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322). This flaw, located in the "sonia" binary's HTTP authentication process, allows an unauthenticated attacker to send an overly long password (1024 characters) in a base64-encoded Authorization header. This triggers a memory corruption issue, enabling attackers to bypass account protection mechanisms and potentially brute-force credentials. The vulnerability carries a CVSS v3.0 score of 9.8 (CRITICAL), indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. An attacker can exploit this remotely without user interaction. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, suggesting it is not actively exploited in the wild. Community discussion and media coverage are also minimal.