CVE-2023-4249
high · 8.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.
8.8
CVSS
12.9%
EPSS (exploit prob.)
96th
EPSS percentile
2023-11-08
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| zavio | cf7500_firmware | m2.1.6.05 |
| zavio | cf7500 | all versions |
| zavio | cf7300_firmware | m2.1.6.05 |
| zavio | cf7300 | all versions |
| zavio | cf7201_firmware | m2.1.6.05 |
| zavio | cf7201 | all versions |
| zavio | cf7501_firmware | m2.1.6.05 |
| zavio | cf7501 | all versions |
| zavio | cb3211_firmware | m2.1.6.05 |
| zavio | cb3211 | all versions |
| zavio | cb3212_firmware | m2.1.6.05 |
| zavio | cb3212 | all versions |
| zavio | cb5220_firmware | m2.1.6.05 |
| zavio | cb5220 | all versions |
| zavio | cb6231_firmware | m2.1.6.05 |
| zavio | cb6231 | all versions |
| zavio | b8520_firmware | m2.1.6.05 |
| zavio | b8520 | all versions |
| zavio | b8220_firmware | m2.1.6.05 |
| zavio | b8220 | all versions |
| zavio | cd321_firmware | m2.1.6.05 |
| zavio | cd321 | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-4249