CVEvulnerability

CVE-2023-39435

9.8 CRITICAL Published 2023-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121, CWE-787

Description

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

Affected configurations

• zavio cf7500 firmware m2.1.6.05 • zavio cf7300 firmware m2.1.6.05 • zavio cf7201 firmware m2.1.6.05 • zavio cf7501 firmware m2.1.6.05 • zavio cb3211 firmware m2.1.6.05 • zavio cb3212 firmware m2.1.6.05 • zavio cb5220 firmware m2.1.6.05 • zavio cb6231 firmware m2.1.6.05 • zavio b8520 firmware m2.1.6.05 • zavio b8220 firmware m2.1.6.05 • zavio cd321 firmware m2.1.6.05

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References