CVE-2023-45225
published 2023-11-08CVE-2023-45225: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.26%
65.9th percentile
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321
IP Cameras with firmware version M2.1.6.05 are
vulnerable to multiple instances of stack-based overflows. While parsing
certain XML elements from incoming network requests, the product does
not sufficiently check or validate allocated buffer size. This may lead
to remote code execution.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zavio | b8220_firmware | — | — |
| zavio | b8520_firmware | — | — |
| zavio | cb3211_firmware | — | — |
| zavio | cb3212_firmware | — | — |
| zavio | cb5220_firmware | — | — |
| zavio | cb6231_firmware | — | — |
| zavio | cd321_firmware | — | — |
| zavio | cf7201_firmware | — | — |
| zavio | cf7300_firmware | — | — |
| zavio | cf7500_firmware | — | — |
| zavio | cf7501_firmware | — | — |
| zavio | ip_camera_b8220 | — | — |
| zavio | ip_camera_b8520 | — | — |
| zavio | ip_camera_cb3211 | — | — |
| zavio | ip_camera_cb3212 | — | — |
| zavio | ip_camera_cb5220 | — | — |
| zavio | ip_camera_cb6231 | — | — |
| zavio | ip_camera_cd321 | — | — |
| zavio | ip_camera_cf7201 | — | — |
| zavio | ip_camera_cf7300 | — | — |
| zavio | ip_camera_cf7500 | — | — |
| zavio | ip_camera_cf7501 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Trigger condition: stack-based buffer overflow occurs while parsing certain XML elements from incoming network requests on Zavio IP Cameras running firmware M2.1.6.05 ↗
- →Attack vector is network-based, unauthenticated (no privileges required, no user interaction), targeting XML parsing logic in the camera's network-facing service — monitor for anomalously large or malformed XML payloads sent to Zavio IP camera HTTP/network interfaces ↗
- →Affected firmware version to fingerprint in network asset inventory or banner grabbing: M2.1.6.05 across all listed Zavio IP camera models (CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, CD321) ↗
- ·No firmware patch or mitigation is available; vendor Zavio is no longer in business and affected products are end-of-life — detection and network isolation are the only defensive options ↗
- ·No known public exploitation has been reported at time of advisory publication, but the vulnerability is remotely exploitable with no authentication required (CVSS 9.8) ↗
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Zavio IP Camera
cisa_ics·2023-10-31·CVSS 9.8
[CRITICAL] Zavio IP Camera
ICS Advisory
##
Zavio IP Camera
Release DateOctober 31, 2023
Alert CodeICSA-23-304-03
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Zavio
- Equipment: IP Camera
- Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer, OS Command Injection
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow remote code execution.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of Zavio IP Cameras are affected:
- CF7500: version M2.1.6.05
- CF7300: version M2.1.6.05
- CF7201: version M2.1.6.05
- CF7501: version M2.1.6.05
- CB3211: version M2.1.6.05
- CB3212: version M2.1.6.05
- CB5220: version M2.1.6.05
- CB623
GHSA
GHSA-x4x4-4mj9-h7v7: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321
IP Cameras with firmware version M2
ghsa_unreviewed·2023-11-09
CVE-2023-45225 [CRITICAL] CWE-121 GHSA-x4x4-4mj9-h7v7: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321
IP Cameras with firmware version M2
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321
IP Cameras with firmware version M2.1.6.05 are
vulnerable to multiple instances of stack-based overflows. While parsing
certain XML elements from incoming network requests, the product does
not sufficiently check or validate allocated buffer size. This may lead
to remote code execution.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-11-08
Published