Skip to content
OpenAdvisories
High · 7.6 CVE-2022-2472 EUVD-2022-34731GHSA-5hpg-vprm-c7r7

Improper Initialization vulnerability in local server authentication logic

Published Sep 15, 2022 · Updated Sep 17, 2024 · Assigned by Bitdefender

Description

Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428.

Affected products

VendorProductAffectedFixed
EZVIZ CS-C6N-A0-1C2WFR unspecified – < 5.3.0 build 220428 5.3.0 build 220428

References