CVE-2022-2471: Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR…

PriorityP262critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.22%

65.0th percentile

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
ezviz	cs-c3w-a0-3h4wfrl	>= unspecified < 5.3.5 build 220723	5.3.5 build 220723
ezviz	cs-c3w-a0-3h4wfrl_firmware	—	—
ezviz	cs-c6n-a0-1c2wfr	>= unspecified < 5.3.0 build 220428	5.3.0 build 220428
ezviz	cs-c6n-a0-1c2wfr_firmware	—	—
ezviz	cs-c6n-b0-1g2wf	>= unspecified < 5.3.0 build 220712	5.3.0 build 220712
ezviz	cs-c6n-b0-1g2wf_firmware	—	—
ezviz	cs-cv248	>= unspecified < 5.2.3 build 220725	5.2.3 build 220725
ezviz	cs-cv248_firmware	—	—
ezviz	cs-db1c-a0-1e2w2fr	>= unspecified < 5.3.0 build 220802	5.3.0 build 220802
ezviz	cs-db1c-a0-1e2w2fr_firmware	—	—

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vendor_oracle5.9MEDIUM

vendor_redhat5.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.