CVE-2022-2471CWE-121

Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

Critical · published September 15, 2022

CVSS v3.1
9.9
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in EZVIZ cameras could let attackers take control remotely with just a carefully crafted packet! 🔥 Think of it like a delivery driver who can access your entire living room just by handing over a package that looks a bit too big for the door — once inside, they can change anything without you noticing! This vulnerability can lead to absolutely devastating consequences, allowing an attacker to execute malicious code on the device. They could manipulate settings, access video feeds, or even turn the camera against you, compromising your privacy and security.

Put simply

Think of it like a delivery driver who can access your entire living room just by handing over a package that looks a bit too big for the door — once inside, they can change anything without you noticing! This stack-based buffer overflow vulnerability occurs in the Motion Detection component, which allows attackers to take control of affected EZVIZ camera models by sending specially crafted data to the device.

What to do

This vulnerability can lead to absolutely devastating consequences, allowing an attacker to execute malicious code on the device. They could manipulate settings, access video feeds, or even turn the camera against you, compromising your privacy and security. To protect your devices, immediately update to the patched versions: 5.2.3 for CS-CV248, 5.3.0 for CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, and CS-C6N-B0-1G2WF, and 5.3.5 for CS-C3W-A0-3H4WFRL. Ensure your firmware is always up to date to avoid such vulnerabilities in the future! You've got this! Follow these steps, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01538 · 74.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2022-09-15T13:15Z
EPSS history
Timeline
  • 15 SEP 13:15Z
    Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component
    cvelistv5