Back to overview

CVE-2022-2471

CRITICAL
9.9
CVSS 3.1
Description
Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Metadata

CVE ID
CVE-2022-2471
State
PUBLISHED
Assigner
Bitdefender
Reserved
2022-07-19 00:00 UTC
Published
2022-09-15 13:15 UTC
Last updated
2024-09-16 16:57 UTC
Primary CWE
CWE-121
CWE-121 Stack-based Buffer Overflow
Vendor / Product
EZVIZ / CS-CV248
Sources
cve.org  ·  NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products (5)
VendorProductPlatformVersions
EZVIZ CS-C3W-A0-3H4WFRL — unspecified < 5.3.5 build 220723
EZVIZ CS-C6N-A0-1C2WFR — unspecified < 5.3.0 build 220428
EZVIZ CS-C6N-B0-1G2WF — unspecified < 5.3.0 build 220712
EZVIZ CS-CV248 — unspecified < 5.2.3 build 220725
EZVIZ CS-DB1C-A0-1E2W2FR — unspecified < 5.3.0 build 220802
Weakness (CWE)
CWESourceDescription
CWE-121 cna CWE-121 Stack-based Buffer Overflow
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.9 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview