CVE-2022-2472CWE-665

Improper Initialization vulnerability in local server authentication logic

High · published September 15, 2022

CVSS v3.1
7.6
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Weakness
CWE-665 · Improper Initialization
Published
2022-09-15T13:20Z
EPSS history
Timeline
  • 15 SEP 13:20Z
    Improper Initialization vulnerability in local server authentication logic
    cvelistv5