CyberSecBulletin

Zavio vulnerabilities

We track 5 vulnerabilities in Zavio products across 22 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2023.

5vulnerabilities
5critical
0high
0exploited
9.8average CVSS score

Latest Zavio vulnerabilities

  • 9.8 Critical severity

    IP Camera CF7500: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-4249ZavioEPSS 12.9%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.

  • 9.8 Critical severity

    IP Camera CF7500: Out-of-bounds Write

    CVE-2023-45225ZavioEPSS 1.62%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network req

  • 9.8 Critical severity

    IP Camera CF7500: Out-of-bounds Write

    CVE-2023-43755ZavioEPSS 1.62%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML e

  • 9.8 Critical severity

    IP Camera CF7500: Out-of-bounds Write

    CVE-2023-3959ZavioEPSS 48.8%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests

  • 9.8 Critical severity

    IP Camera CF7500: Out-of-bounds Write

    CVE-2023-39435ZavioEPSS 1.58%

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network request