CVE-2022-2471

Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

State: Published
Severity: 9.9 Critical
Published: Sep 15, 2022
Updated: Sep 16, 2024
Reserved: Jul 19, 2022

Description

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Scores

CVSS	Score	Vector	Source
3.1	9.9 Critical	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Bitdefender

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
CS-CV248EZVIZ	before 5.2.3 build 220725Affected
CS-C6N-A0-1C2WFREZVIZ	before 5.3.0 build 220428Affected
CS-DB1C-A0-1E2W2FREZVIZ	before 5.3.0 build 220802Affected
CS-C6N-B0-1G2WFEZVIZ	before 5.3.0 build 220712Affected
CS-C3W-A0-3H4WFRLEZVIZ	before 5.3.5 build 220723Affected

References

https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.