CVE-2023-39435CWE-121

Zavio IP Camera Stack-Based Buffer Overflow

High · published November 8, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,

CB6231, B8520, B8220, and CD321 IP Cameras

with firmware version M2.1.6.05 are

vulnerable to stack-based overflows. During the process of updating

certain settings sent from incoming network requests, the product does

not sufficiently check or validate allocated buffer size. This may lead

to remote code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01225 · 68.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-11-08T22:54Z
EPSS history
Timeline
  • 08 NOV 22:54Z
    Zavio IP Camera Stack-Based Buffer Overflow
    cvelistv5