CVE-2023-4249

🗓️ 08 Nov 2023 22:51:25Reported by icscertType

CVE-2023-4249 Zavio IP Cameras firmware M2.1.6.05 command injection vulnerabilit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-4249	7 Sep 202311:11	–	circl
CNNVD	Zavio CF Series Operating System Command Injection Vulnerability	8 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4249 Zavio IP Camera Stack-Based Buffer Overflow	8 Nov 202322:51	–	cvelist
EUVD	EUVD-2023-54120	3 Oct 202520:07	–	euvd
ICS	Zavio IP Camera	31 Oct 202306:00	–	ics
NVD	CVE-2023-4249	8 Nov 202323:15	–	nvd
OSV	CVE-2023-4249	8 Nov 202323:15	–	osv
Prion	Command injection	8 Nov 202323:15	–	prion
Positive Technologies	PT-2023-28372 · Zavio · Zavio Cf7500 +10	7 Sep 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-4249 Zavio IP Camera Stack-Based Buffer Overflow	8 Nov 202322:51	–	vulnrichment

NVD

Vulners

Node

zavio cf7500_firmwareMatchm2.1.6.05

AND

zavio cf7500Match-

Node

zavio cf7300_firmwareMatchm2.1.6.05

AND

zavio cf7300Match-

Node

zavio cf7201_firmwareMatchm2.1.6.05

AND

zavio cf7201Match-

Node

zavio cf7501_firmwareMatchm2.1.6.05

AND

zavio cf7501Match-

Node

zavio cb3211_firmwareMatchm2.1.6.05

AND

zavio cb3211Match-

Node

zavio cb3212_firmwareMatchm2.1.6.05

AND

zavio cb3212Match-

Node

zavio cb5220_firmwareMatchm2.1.6.05

AND

zavio cb5220Match-

Node

zavio cb6231_firmwareMatchm2.1.6.05

AND

zavio cb6231Match-

Node

zavio b8520_firmwareMatchm2.1.6.05

AND

zavio b8520Match-

Node

zavio b8220_firmwareMatchm2.1.6.05

AND

zavio b8220Match-

Node

zavio cd321_firmwareMatchm2.1.6.05

AND

zavio cd321Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CF7500",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CF7300",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CF7201",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CF7501",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CB3211",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CB3212",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CB5220",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CB6231",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera B8520",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera B8220",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IP Camera CD321",
    "vendor": "Zavio",
    "versions": [
      {
        "status": "affected",
        "version": "version M2.1.6.05"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-304-03

21 Nov 2024 08:34Current

9.4High risk

Vulners AI Score9.4

CVSS 3.18.8 - 9.8

EPSS0.00538

SSVC