Ezviz vulnerabilities
We track 4 vulnerabilities in Ezviz products across 21 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2024.
Latest Ezviz vulnerabilities
- 9.8 Critical severity
Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live…
Ezviz Internet PT Camera CS-CV246 D15655150 allows an unauthenticated host to access its live video stream by crafting a set of RTSP packets with a specific set of URLs that can be used to redirect the camera feed. NOTE: the vendor's perspective is that the An
- 8.8 High severity
cs-c6n-a0-1c2wfr-mul_firmware: Out-of-bounds Write
In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol can allow an unauthenticated attacker present on the same local network as the camera to achieve remot
- 8.0 High severity
cs-c6n-b0-1g2wf_firmware: Out-of-bounds Write
In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1
- 9.8 Critical severity
CS-CV248: Stack-based Buffer Overflow
Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This is