CVEvulnerability

CVE-2023-45225

9.8 CRITICAL Published 2023-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121, CWE-787

Description

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

Affected configurations

• zavio cf7500 firmware m2.1.6.05 • zavio cf7300 firmware m2.1.6.05 • zavio cf7201 firmware m2.1.6.05 • zavio cf7501 firmware m2.1.6.05 • zavio cb3211 firmware m2.1.6.05 • zavio cb3212 firmware m2.1.6.05 • zavio cb5220 firmware m2.1.6.05 • zavio cb6231 firmware m2.1.6.05 • zavio b8520 firmware m2.1.6.05 • zavio b8220 firmware m2.1.6.05 • zavio cd321 firmware m2.1.6.05

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References