CVE-2023-4249 — Zavio IP Camera Stack-Based Buffer Overflow

Description (CNA)

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.

Affected (CNA)

Vendor / product	Versions
Zavio / IP Camera CF7500	affected version M2.1.6.05
Zavio / IP Camera CF7300	affected version M2.1.6.05
Zavio / IP Camera CF7201	affected version M2.1.6.05
Zavio / IP Camera CF7501	affected version M2.1.6.05
Zavio / IP Camera CB3211	affected version M2.1.6.05
Zavio / IP Camera CB3212	affected version M2.1.6.05
Zavio / IP Camera CB5220	affected version M2.1.6.05
Zavio / IP Camera CB6231	affected version M2.1.6.05
Zavio / IP Camera B8520	affected version M2.1.6.05
Zavio / IP Camera B8220	affected version M2.1.6.05
Zavio / IP Camera CD321	affected version M2.1.6.05

CWE

CWE-121

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03

CISA-ADP

No English description supplied.

No references supplied.