Zavio IP Camera

🗓️ 31 Oct 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 63 Views

Zavio IP Camera firmware M2.1.6.05 stack-based buffer overflow vulnerability allows remote code execution

Reporter	Title	Published	Views	Family All 50
BDU FSTEC	The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.	10 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.	10 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.	10 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of IP cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 arises from buffer overflows in the stack. This allows intruders to execute arbitrary code.	10 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-3959	7 Sep 202311:11	–	circl
Circl	CVE-2023-4249	7 Sep 202311:11	–	circl
CNNVD	Zavio CF Series IP Camera Buffer Error Vulnerability	8 Nov 202300:00	–	cnnvd
CNNVD	Zavio CF Series IP Camera Buffer Error Vulnerability	8 Nov 202300:00	–	cnnvd
CNNVD	Zavio CF Series IP Camera Buffer Error Vulnerability	8 Nov 202300:00	–	cnnvd
CNNVD	Zavio CF Series Operating System Command Injection Vulnerability	8 Nov 202300:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-304-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-304-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

31 Oct 2023 06:00Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.00789

SSVC

zavio ip camera firmware m2.1.6.05 stack-based buffer overflow remote code execution vulnerability cve-2023-3959 cve-2023-45225 cve-2023-43755 cve-2023-39435