Skip to content
OpenAdvisories
High · 7.5 CVE-2019-9564 EUVD-2019-18935GHSA-vvr6-jfrg-g7cr

Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3

Published Mar 30, 2022 · Updated Sep 16, 2024 · Assigned by Bitdefender

Description

A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.

Affected products

VendorProductAffectedFixed
Wyze Cam Pan v2 unspecified – < 4.49.1.47 4.49.1.47
Wyze Cam v2 unspecified – < 4.9.8.1002 4.9.8.1002
Wyze Cam v3 unspecified – < 4.36.8.32 4.36.8.32

References