medium6.8
CVE-2024-37066
A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetoo…
Impact
A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wyze | Cam V4 Firmware | through 4.52.4.9887 |