CVE-2023-3959
critical · 9.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
9.8
CVSS
48.8%
EPSS (exploit prob.)
99th
EPSS percentile
2023-11-08
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zavio | cf7500_firmware | m2.1.6.05 |
| zavio | cf7500 | all versions |
| zavio | cf7300_firmware | m2.1.6.05 |
| zavio | cf7300 | all versions |
| zavio | cf7201_firmware | m2.1.6.05 |
| zavio | cf7201 | all versions |
| zavio | cf7501_firmware | m2.1.6.05 |
| zavio | cf7501 | all versions |
| zavio | cb3211_firmware | m2.1.6.05 |
| zavio | cb3211 | all versions |
| zavio | cb3212_firmware | m2.1.6.05 |
| zavio | cb3212 | all versions |
| zavio | cb5220_firmware | m2.1.6.05 |
| zavio | cb5220 | all versions |
| zavio | cb6231_firmware | m2.1.6.05 |
| zavio | cb6231 | all versions |
| zavio | b8520_firmware | m2.1.6.05 |
| zavio | b8520 | all versions |
| zavio | b8220_firmware | m2.1.6.05 |
| zavio | b8220 | all versions |
| zavio | cd321_firmware | m2.1.6.05 |
| zavio | cd321 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-3959