CVE-2019-9564

🗓️ 30 Mar 2022 20:00:17Reported by BitdefenderType

Vulnerability in Wyze Cams allows login bypass and device control (CVE-2019-9564

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-9564	29 Mar 202220:40	–	circl
CNNVD	Wyze Labs Wyze Cam 授权问题漏洞	30 Mar 202200:00	–	cnnvd
CNVD	Wyze Cam Authentication Bypass Vulnerability	31 Mar 202200:00	–	cnvd
Cvelist	CVE-2019-9564 Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3	30 Mar 202220:00	–	cvelist
EUVD	EUVD-2019-18935	7 Oct 202500:30	–	euvd
NVD	CVE-2019-9564	30 Mar 202220:15	–	nvd
OSV	CVE-2019-9564	30 Mar 202220:15	–	osv
Prion	Authentication flaw	30 Mar 202220:15	–	prion
Positive Technologies	PT-2022-8312 · Wyze · Wyze Cam V3 +2	29 Mar 202200:00	–	ptsecurity
The Hacker News	Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds	31 Mar 202213:27	–	thn

NVD

Node

wyze cam_pan_v2_firmwareRange<4.49.1.47

AND

wyze cam_pan_v2Match-

Node

wyze cam_v2_firmwareRange<4.9.8.1002

AND

wyze cam_v2Match-

Node

wyze cam_v3_firmwareRange<4.36.8.32

AND

wyze cam_v3Match-

[
  {
    "product": "Cam Pan v2",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.49.1.47",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cam v2",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.9.8.1002",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cam v3",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.36.8.32",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bitdefender	www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/

21 Nov 2024 04:51Current

8.8High risk

Vulners AI Score8.8

CVSS 27.5

CVSS 3.17.5 - 9.8

EPSS0.00379

CWE-287