CVE-2019-9564

Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3

High · published March 30, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01419 · 72.6th percentile
Published
2022-03-30T20:00Z
EPSS history
Timeline
  • 30 MAR 20:00Z
    Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3
    cvelistv5