ezviz_lan_rce

ezvizlanrce 此仓库包含演讲 SADProtocol goes to Hollywood 的幻灯片和 PoC 视频，该演讲已在 DEF CON 31 Hardware Hacking Village 上发布。您还可以找到用于构建可在相机上运行的二进制文件的 docker 镜像，以及 CVE-2023-34551 和 CVE-2023-34552 的概念验证漏洞利用代码。...

CVE-2023-34551

creationtimestamp| type| source ---|---|--- 2024-02-08 12:46:20+00:00| published-proof-of-concept| Telegram/2xp2HKwG4k-i-985uD9q3QFLiHE0U-cNCXCN5jcjj1A 2024-02-08 13:13:15+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/3672 2026-09-01 20:00:40+00:00| seen|...

CVE-2023-34551

EZVIZ CVE-2023-34551 describes two stack buffer overflows in the netClientSetWlanCfg function of the EZVIZ SDK command server that allow an authenticated attacker on the same LAN to achieve remote code execution. Affected CS-C6N-B0-1G2WF, CS-C6N-R101-1G2WF, CS-CV310-A0-1B2WFR, CS-CV310-A0-1C2WFR-...