CVE-2023-34551

Published: Aug 1, 2023Modified: Jul 9, 2026

8.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214. The impact is: execute arbitrary code (remote).

Affected (9)

Products: Ezviz: Cs C6n B0 1g2wf Firmware, Cs C6n R101 1g2wf Firmware, Cs Cv310 A0 1b2wfr Firmware, Cs Cv310 A0 1c2wfr C Firmware, Cs C6n A0 1c2wfr Mul Firmware, Cs Cv310 A0 3c2wfrl 1080p Firmware, Cs Cv310 A0 1c2wfr Firmware, Cs Cv248 A0 32wmfr Firmware, Lc1c Firmware

Ezviz

9 products

Cs C6n B0 1g2wf Firmware

Cs C6n R101 1g2wf Firmware

Cs Cv310 A0 1b2wfr Firmware

Cs Cv310 A0 1c2wfr C Firmware

Cs C6n A0 1c2wfr Mul Firmware

Cs Cv310 A0 3c2wfrl 1080p Firmware

Cs Cv310 A0 1c2wfr Firmware

Cs Cv248 A0 32wmfr Firmware

Lc1c Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs C6n B0 1g2wf Firmware	Up to 5.3.0

Running on/with	Platform Versions
Ezviz Cs C6n B0 1g2wf	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs C6n R101 1g2wf Firmware	Up to 5.3.0

Running on/with	Platform Versions
Ezviz Cs C6n R101 1g2wf	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs Cv310 A0 1b2wfr Firmware	Up to 5.3.0

Running on/with	Platform Versions
Ezviz Cs Cv310 A0 1b2wfr	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs Cv310 A0 1c2wfr C Firmware	Up to 5.3.2

Running on/with	Platform Versions
Ezviz Cs Cv310 A0 1c2wfr C	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs C6n A0 1c2wfr Mul Firmware	Up to 5.3.2

Running on/with	Platform Versions
Ezviz Cs C6n A0 1c2wfr Mul	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs Cv310 A0 3c2wfrl 1080p Firmware	Up to 5.2.7

Running on/with	Platform Versions
Ezviz Cs Cv310 A0 3c2wfrl 1080p	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs Cv310 A0 1c2wfr Firmware	Up to 5.3.2

Running on/with	Platform Versions
Ezviz Cs Cv310 A0 1c2wfr	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Cs Cv248 A0 32wmfr Firmware	Up to 5.2.3

Running on/with	Platform Versions
Ezviz Cs Cv248 A0 32wmfr	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ezviz Lc1c Firmware	Up to 5.3.4

Running on/with	Platform Versions
Ezviz Lc1c	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.ezviz.com/data-security/security-notice/detail/827

Source: cve@mitre.org

Vendor Advisory

https://www.ezviz.com/data-security/security-notice/detail/827

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.