Lucene search

K
nvd[email protected]NVD:CVE-2023-4249
HistoryNov 08, 2023 - 11:15 p.m.

CVE-2023-4249

2023-11-0823:15:11
CWE-121
CWE-78
web.nvd.nist.gov
ip cameras
command injection
zavio models
firmware vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

29.8%

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321

IP Cameras

with firmware version M2.1.6.05 has a
command injection vulnerability in their implementation of their
binaries and handling of network requests.

Affected configurations

NVD
Node
zaviocf7500_firmwareMatchm2.1.6.05
AND
zaviocf7500Match-
Node
zaviocf7300_firmwareMatchm2.1.6.05
AND
zaviocf7300Match-
Node
zaviocf7201_firmwareMatchm2.1.6.05
AND
zaviocf7201Match-
Node
zaviocf7501_firmwareMatchm2.1.6.05
AND
zaviocf7501Match-
Node
zaviocb3211_firmwareMatchm2.1.6.05
AND
zaviocb3211Match-
Node
zaviocb3212_firmwareMatchm2.1.6.05
AND
zaviocb3212Match-
Node
zaviocb5220_firmwareMatchm2.1.6.05
AND
zaviocb5220Match-
Node
zaviocb6231_firmwareMatchm2.1.6.05
AND
zaviocb6231Match-
Node
zaviob8520_firmwareMatchm2.1.6.05
AND
zaviob8520Match-
Node
zaviob8220_firmwareMatchm2.1.6.05
AND
zaviob8220Match-
Node
zaviocd321_firmwareMatchm2.1.6.05
AND
zaviocd321Match-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

29.8%

Related for NVD:CVE-2023-4249