critical9.8
CVE-2023-3959
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to mult…
Impact
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zavio | Cf7500 Firmware | Version m2.1.6.05 |
| Zavio | Cf7300 Firmware | Version m2.1.6.05 |
| Zavio | Cf7201 Firmware | Version m2.1.6.05 |
| Zavio | Cf7501 Firmware | Version m2.1.6.05 |
| Zavio | Cb3211 Firmware | Version m2.1.6.05 |
| Zavio | Cb3212 Firmware | Version m2.1.6.05 |
| Zavio | Cb5220 Firmware | Version m2.1.6.05 |
| Zavio | Cb6231 Firmware | Version m2.1.6.05 |
| Zavio | B8520 Firmware | Version m2.1.6.05 |
| Zavio | B8220 Firmware | Version m2.1.6.05 |
| Zavio | Cd321 Firmware | Version m2.1.6.05 |