CVE-2023-43755criticalCWE-121

CVE-2023-43755: falha crítica em Zavio IP Camera B8220

Zavio IP Camera Stack-Based Buffer Overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar IP Camera B8220+ Monitorar IP Camera B8520

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.6%
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Zavio · IP Camera B8220Zavio · IP Camera B8520Zavio · IP Camera CB3211Zavio · IP Camera CB3212Zavio · IP Camera CB5220Zavio · IP Camera CB6231Zavio · IP Camera CD321Zavio · IP Camera CF7201Zavio · IP Camera CF7300Zavio · IP Camera CF7500Zavio · IP Camera CF7501
CVEs relacionadas — Zavio IP Camera B8220

No mesmo produto, das mais perigosas para as menos.

CVE-2023-3959CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 48.8%CVE-2023-4249HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 12.9%CVE-2023-45225CRITICALZavio IP Camera Stack-Based Buffer OverflowEPSS 1.6%CVE-2023-39435HIGHZavio IP Camera Stack-Based Buffer OverflowEPSS 1.6%