Skip to content
OpenAdvisories
Critical ICSA-23-304-03 5 CVEs

Zavio IP Camera

Published Oct 31, 2023 · Updated Oct 31, 2023

Vendor: Zavio Product: B8220 Product: B8520 Product: CB3211 Product: CB3212 Product: CB5220 Product: CB6231 Product: CD321 Product: CF7201 Product: CF7300 Product: CF7500 Product: CF7501

Summary

Successful exploitation of these vulnerabilities could allow remote code execution.

Vulnerabilities 5

  • Critical 9.8
    CVE-2023-3959 EPSS 49%

    Zavio IP Camera Stack-Based Buffer Overflow

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network request…

    Zavio IP Camera CB3212 IP Camera CB6231 IP Camera CF7500
  • Critical 9.8
    CVE-2023-43755

    Zavio IP Camera Stack-Based Buffer Overflow

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. During the processing and parsing of certain fields in XML …

    Zavio IP Camera CB5220 IP Camera B8520 IP Camera CF7300
  • Critical 9.8
    CVE-2023-45225

    Zavio IP Camera Stack-Based Buffer Overflow

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network r…

    Zavio IP Camera CF7300 IP Camera CD321 IP Camera CF7501
  • High 8.8
    CVE-2023-39435

    Zavio IP Camera Stack-Based Buffer Overflow

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows. During the process of updating certain settings sent from incoming network reques…

    Zavio IP Camera CB5220 IP Camera B8520 IP Camera CF7300
  • High 8.8
    CVE-2023-4249 EPSS 13%

    Zavio IP Camera Stack-Based Buffer Overflow

    Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.

    Zavio IP Camera B8220 IP Camera CF7201 IP Camera CB3211

Revision history

  1. #1

    Initial Publication

References