CVE-2019-9564: A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects…

PriorityP359critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.36%

68.3th percentile

A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
wyze	cam_pan_v2	>= unspecified < 4.49.1.47	4.49.1.47
wyze	cam_pan_v2_firmware	< 4.49.1.47	4.49.1.47
wyze	cam_v2	>= unspecified < 4.9.8.1002	4.9.8.1002
wyze	cam_v2_firmware	< 4.9.8.1002	4.9.8.1002
wyze	cam_v3	>= unspecified < 4.36.8.32	4.36.8.32
wyze	cam_v3_firmware	< 4.36.8.32	4.36.8.32

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.