Read the docs

EZVIZ

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

EZVIZ records in CISA KEV

No EZVIZ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cs-c6n-a0-1c2wfr Firmware 3 records MEDIUM Cs-c6n-b0-1g2wf Firmware 3 records MEDIUM Cs-cv310-a0-1c2wfr Firmware 3 records MEDIUM Cs-c6n-a0-1c2wfr-mul Firmware 2 records MEDIUM Cs-c6n-r101-1g2wf Firmware 2 records MEDIUM Cs-cv248-a0-32wmfr Firmware 2 records MEDIUM Cs-cv310-a0-1b2wfr Firmware 2 records MEDIUM Cs-cv310-a0-1c2wfr-c Firmware 2 records MEDIUM

Records

8 records

TI-2022-02282 CVE-2022-2471 · GHSA-wmr3-r282-gf5h

Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

Priority MEDIUM 46

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to ex…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01538 Published 2022-09-15 Fixed in 5.2.3 build 220725, 5.3.0 build 220428 +3 CWE-121
TI-2023-17314 CVE-2023-34552 · GHSA-9m3r-v8gg-v29j

In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet…

Priority MEDIUM 40

In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol can allow an unauthenticated attacker present on the same loca…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00448 Published 2023-08-01 No fix listed CWE-121
TI-2023-17313 CVE-2023-34551 · GHSA-xg9r-w6fx-9996

In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of…

Priority LOW 37

In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker present on the same local network as the camera to achieve remote…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00524 Published 2023-08-01 No fix listed CWE-787
TI-2022-02283 CVE-2022-2472 · GHSA-5hpg-vprm-c7r7

Improper Initialization vulnerability in local server authentication logic

Priority LOW 33

Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password.

CVSS 3.1HIGH 7.6 Adjacent network High privileges No interaction EPSS 0.00294 Published 2022-09-15 Fixed in 5.3.0 build 220428 CWE-665
TI-2023-26044 CVE-2023-48121 · GHSA-9rc5-4p7c-qp9h

An authentication bypass vulnerability in the Direct Connection Module in Ezviz…

Priority LOW 26

An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 202304…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00832 Published 2023-11-28 No fix listed CWE-287
TI-2026-25175 CVE-2026-32683 · GHSA-5xjc-rg5p-8xgc

Cleartext transmission of sensitive information in EZVIZ APP

Priority LOW 23

Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk.

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00088 Published 2026-05-09 No fix listed CWE-319
Open these records in search →