CVE-2023-39435highCWE-121

CVE-2023-39435: high-severity vulnerability in Zavio IP Camera B8220

Zavio IP Camera Stack-Based Buffer Overflow

Published · Updated

Follow this CVE+ Monitor IP Camera B8220+ Monitor IP Camera B8520

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.6%
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Zavio · IP Camera B8220Zavio · IP Camera B8520Zavio · IP Camera CB3211Zavio · IP Camera CB3212Zavio · IP Camera CB5220Zavio · IP Camera CB6231Zavio · IP Camera CD321Zavio · IP Camera CF7201Zavio · IP Camera CF7300Zavio · IP Camera CF7500Zavio · IP Camera CF7501
Related CVEs — Zavio IP Camera B8220

In the same product, most dangerous first.

CVE-2023-3959CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 48.8%CVE-2023-4249HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 12.9%CVE-2023-45225CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 1.6%CVE-2023-43755CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 1.6%