CVE-2019-12266: Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue…

PriorityP359critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.20%

64.3th percentile

Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
wyze	cam_pan_v2	>= unspecified < 4.49.1.47	4.49.1.47
wyze	cam_pan_v2_firmware	< 4.49.1.47	4.49.1.47
wyze	cam_v2	>= unspecified < 4.9.8.1002	4.9.8.1002
wyze	cam_v2_firmware	< 4.9.8.1002	4.9.8.1002
wyze	cam_v3	>= unspecified < 4.36.8.32	4.36.8.32
wyze	cam_v3_firmware	< 4.36.8.32	4.36.8.32

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.