Read the docs
TI-2022-02282 Aliases CVE-2022-2471GHSA-wmr3-r282-gf5h

Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

Priority MEDIUM 46CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Why it matters now

EPSS 0.01538 75th percentileScored 2026-11-07
Fix Fixed CS-CV248 (EZVIZ): 5.2.3 build 220725CS-C6N-A0-1C2WFR (EZVIZ): 5.3.0 build 220428+3 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
EZVIZCS-CV248before 5.2.3 build 2207255.2.3 build 220725Patch availableCNA
EZVIZCS-C6N-A0-1C2WFRbefore 5.3.0 build 2204285.3.0 build 220428Patch availableCNA
EZVIZCS-DB1C-A0-1E2W2FRbefore 5.3.0 build 2208025.3.0 build 220802Patch availableCNA
EZVIZCS-C6N-B0-1G2WFbefore 5.3.0 build 2207125.3.0 build 220712Patch availableCNA
EZVIZCS-C3W-A0-3H4WFRLbefore 5.3.5 build 2207235.3.5 build 220723Patch availableCNA
  • CS-CV248 VendorEZVIZ Affected before 5.2.3 build 220725 Fixed in 5.2.3 build 220725 Patch available CNA
  • CS-C6N-A0-1C2WFR VendorEZVIZ Affected before 5.3.0 build 220428 Fixed in 5.3.0 build 220428 Patch available CNA
  • CS-DB1C-A0-1E2W2FR VendorEZVIZ Affected before 5.3.0 build 220802 Fixed in 5.3.0 build 220802 Patch available CNA
  • CS-C6N-B0-1G2WF VendorEZVIZ Affected before 5.3.0 build 220712 Fixed in 5.3.0 build 220712 Patch available CNA
  • CS-C3W-A0-3H4WFRL VendorEZVIZ Affected before 5.3.5 build 220723 Fixed in 5.3.5 build 220723 Patch available CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:ezviz:cs-c6n-a0-1c2wfr_firmware:5.3.0:build201719:*:*:*:*:*:*5.3.0 build201719VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-c6n-a0-1c2wfr:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
cpe:2.3:o:ezviz:cs-db1c-a0-1e2w2fr_firmware:5.3.0:build211208:*:*:*:*:*:*5.3.0 build211208VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-db1c-a0-1e2w2fr:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
cpe:2.3:o:ezviz:cs-c6n-b0-1g2wf_firmware:5.3.0:build210731:*:*:*:*:*:*5.3.0 build210731VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-c6n-b0-1g2wf:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
cpe:2.3:o:ezviz:cs-c3w-a0-3h4wfrl_firmware:5.3.5:build220120:*:*:*:*:*:*5.3.5 build220120VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-c3w-a0-3h4wfrl:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
cpe:2.3:o:ezviz:cs-cv248_firmware:5.2.1:build180403:*:*:*:*:*:*5.2.1 build180403VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-cv248:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
  • cpe:2.3:o:ezviz:cs-c6n-a0-1c2wfr_firmware:5.3.0:build201719:*:*:*:*:*:* Versions 5.3.0 build201719 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-c6n-a0-1c2wfr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ
  • cpe:2.3:o:ezviz:cs-db1c-a0-1e2w2fr_firmware:5.3.0:build211208:*:*:*:*:*:* Versions 5.3.0 build211208 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-db1c-a0-1e2w2fr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ
  • cpe:2.3:o:ezviz:cs-c6n-b0-1g2wf_firmware:5.3.0:build210731:*:*:*:*:*:* Versions 5.3.0 build210731 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-c6n-b0-1g2wf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ
  • cpe:2.3:o:ezviz:cs-c3w-a0-3h4wfrl_firmware:5.3.5:build220120:*:*:*:*:*:* Versions 5.3.5 build220120 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-c3w-a0-3h4wfrl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ
  • cpe:2.3:o:ezviz:cs-cv248_firmware:5.2.1:build180403:*:*:*:*:*:* Versions 5.2.1 build180403 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-cv248:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ

Remediation

  • Fix · CNA CS-CV248 (EZVIZ) Fixed in 5.2.3 build 220725
  • Fix · CNA CS-C6N-A0-1C2WFR (EZVIZ) Fixed in 5.3.0 build 220428
  • Fix · CNA CS-DB1C-A0-1E2W2FR (EZVIZ) Fixed in 5.3.0 build 220802
  • Fix · CNA CS-C6N-B0-1G2WF (EZVIZ) Fixed in 5.3.0 build 220712
  • Fix · CNA CS-C3W-A0-3H4WFRL (EZVIZ) Fixed in 5.3.5 build 220723

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    EZVIZ CS-C6N-A0-1C2WFR 5.3.0 build 220428

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2022-02283 Improper Initialization vulnerability in local server authentication logicPriority LOW 33
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-2471
  2. 2026-10-03 Alias added: GHSA-wmr3-r282-gf5h

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences