Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveBitdefenderCVE-2019-12266
HistoryMar 30, 2022 - 8:15 p.m.

CVE-2019-12266

2022-03-3020:15:08
CWE-787
CWE-121
Bitdefender
web.nvd.nist.gov
38
cve-2019-12266
vulnerability
buffer overflow
wyze cam pan
nvd
security issue

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

68.8%

JSON

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.

Affected configurations

Nvd
Node
wyzecam_pan_v2Match-
AND
wyzecam_pan_v2_firmwareRange<4.49.1.47
Node
wyzecam_v2Match-
AND
wyzecam_v2_firmwareRange<4.9.8.1002
Node
wyzecam_v3Match-
AND
wyzecam_v3_firmwareRange<4.36.8.32
VendorProductVersionCPE
wyzecam_pan_v2-cpe:2.3:h:wyze:cam_pan_v2:-:*:*:*:*:*:*:*
wyzecam_pan_v2_firmware*cpe:2.3:o:wyze:cam_pan_v2_firmware:*:*:*:*:*:*:*:*
wyzecam_v2-cpe:2.3:h:wyze:cam_v2:-:*:*:*:*:*:*:*
wyzecam_v2_firmware*cpe:2.3:o:wyze:cam_v2_firmware:*:*:*:*:*:*:*:*
wyzecam_v3-cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*
wyzecam_v3_firmware*cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Cam Pan v2",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.49.1.47",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cam v2",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.9.8.1002",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cam v3",
    "vendor": "Wyze",
    "versions": [
      {
        "lessThan": "4.36.8.32",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Related

prion 1
cvelist 1
nvd 1
thn 1
prion
prion
Stack overflow
2022-03-30 20:15:00
cvelist
cvelist
CVE-2019-12266 Stack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3
2022-03-30 19:55:17
nvd
nvd
CVE-2019-12266
2022-03-30 20:15:08
thn
thn
Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds
2022-03-31 13:27:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

68.8%

JSON
Related for CVE-2019-12266
prion1cvelist1nvd1thn1