Vendors / Wyze Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 6
Exploited now Wyze records in CISA KEV No Wyze vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01248 · Published 2022-03-30 · Fixed in 4.49.1.47, 4.9.8.1002 +1 CWE-121
Priority MEDIUM 45
A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01419 · Published 2022-03-30 · Fixed in 4.49.1.47, 4.9.8.1002 +1 CWE-287
Priority MEDIUM 44
A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01828 · Published 2024-07-19 · No fix listed CWE-78
Priority MEDIUM 42
Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00991 · Published 2024-11-22 · No fix listed CWE-121
Priority MEDIUM 42
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01022 · Published 2024-05-15 · No fix listed CWE-121
Priority MEDIUM 41
Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00771 · Published 2024-11-22 · No fix listed CWE-122
Priority MEDIUM 41
ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00712 · Published 2024-05-15 · No fix listed CWE-457
Priority LOW 37
Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.01 · Published 2024-11-22 · No fix listed CWE-287
Priority LOW 36
Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.01856 · Published 2024-11-22 · No fix listed CWE-78
Priority LOW 29
ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00328 · Published 2024-05-15 · Fixed in 4.3.4.2 CWE-345
Open these records in search → All records by CVSS severity
2 6 2 0 0
THREATIST.IORead the docs