Wyze vulnerabilities
We track 5 vulnerabilities in Wyze products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 22, 2024.
Latest Wyze vulnerabilities
- 8.8 High severity
Cam v3: Out-of-bounds Write
Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required
- 7.5 High severity
Cam v3: Improper Authentication
Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to
- 8.8 High severity
Cam v3: Out-of-bounds Write
Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required
- 8.8 High severity
Wyze Cam V4 Pro: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.
- 8.8 High severity
Indoor Camera SE: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can m