Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-45225

Zavio IP Camera Stack-Based Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zavio IP Camera CF7500

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CF7300

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CF7201

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CF7501

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CB3211

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CB3212

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CB5220

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CB6231

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera B8520

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera B8220

Default version status: unaffected

  • version M2.1.6.05affected

Zavio IP Camera CD321

Default version status: unaffected

  • version M2.1.6.05affected

References