VULNERABILITY INTELLIGENCE

CVE-2023-45225

CVSS score9.8 CRITICAL
EPSS probability1.62%
CISA KEVNot currently listed
Published2023-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-121
  • nvd@nist.gov: CWE-787

Primary references