Description
A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Published: 2026-09-28
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Exploitation via buffer overflow
Action: Apply Patch
AI Analysis

Impact

The vulnerability is a stack-based buffer overflow that occurs in an unknown function of the p2pcam HTTP parser in Eyeplus firmware 57.0.0.0308. Sending a specially crafted HTTP request can corrupt the stack memory, potentially leading to a program crash or a change in program behavior that may affect confidentiality, integrity, or availability. The CVE documentation does not specify the precise outcome, but such overflows can allow an attacker to alter memory on the stack.

Affected Systems

Eyeplus devices running firmware version 57.0.0.0308 are affected. The flaw exists solely in the Eyeplus eyeplus product and is not known to affect other vendors or product versions.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity. No EPSS data is available, so the current exploit probability is unknown, although the vulnerability has been publicly disclosed and may be targeted by attackers. The vulnerability can be triggered remotely over the HTTP interface. The flaw is not listed in CISA's KEV catalog, but its high severity and remote accessibility warrant immediate attention.

Generated by OpenCVE AI on September 28, 2026 at 05:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Eyeplus firmware to the latest release that contains the fix for the HTTP parser issue
  • Restrict network access to the p2pcam HTTP interface to trusted IP addresses or VPN only
  • Monitor HTTP requests for unusually long URIs or malformed packets and block such attempts

Generated by OpenCVE AI on September 28, 2026 at 05:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 28 Sep 2026 04:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Title Eyeplus p2pcam HTTP stack-based overflow
First Time appeared Eyeplus
Eyeplus eyeplus
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:eyeplus:eyeplus:*:*:*:*:*:*:*:*
Vendors & Products Eyeplus
Eyeplus eyeplus
References
Metrics cvssV2_0

{'score': 7.8, 'vector': 'AV:N/AC:L/Au:N/C:N/I:N/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Eyeplus Eyeplus
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-28T12:35:49.807Z

Reserved: 2026-09-27T09:25:56.750Z

Link: CVE-2026-100908

cve-icon Vulnrichment

Updated: 2026-09-28T12:35:33.519Z

cve-icon NVD

Status : Deferred

Published: 2026-09-28T05:16:29.877

Modified: 2026-09-28T15:16:04.793

Link: CVE-2026-100908

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-28T19:42:49Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow