Description (CNA)
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zavio / IP Camera CF7500 | affected version M2.1.6.05 |
| Zavio / IP Camera CF7300 | affected version M2.1.6.05 |
| Zavio / IP Camera CF7201 | affected version M2.1.6.05 |
| Zavio / IP Camera CF7501 | affected version M2.1.6.05 |
| Zavio / IP Camera CB3211 | affected version M2.1.6.05 |
| Zavio / IP Camera CB3212 | affected version M2.1.6.05 |
| Zavio / IP Camera CB5220 | affected version M2.1.6.05 |
| Zavio / IP Camera CB6231 | affected version M2.1.6.05 |
| Zavio / IP Camera B8520 | affected version M2.1.6.05 |
| Zavio / IP Camera B8220 | affected version M2.1.6.05 |
| Zavio / IP Camera CD321 | affected version M2.1.6.05 |
CWE
CWE-121
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.