Read the docs
TI-2022-02283 Aliases CVE-2022-2472GHSA-5hpg-vprm-c7r7

Improper Initialization vulnerability in local server authentication logic

Priority LOW 33CWE-665Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428.

Why it matters now

EPSS 0.00294 22nd percentileScored 2026-11-07
Fix Fixed CS-C6N-A0-1C2WFR (EZVIZ): 5.3.0 build 220428

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
EZVIZCS-C6N-A0-1C2WFRbefore 5.3.0 build 2204285.3.0 build 220428Patch availableCNA
  • CS-C6N-A0-1C2WFR VendorEZVIZ Affected before 5.3.0 build 220428 Fixed in 5.3.0 build 220428 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:ezviz:cs-c6n-a0-1c2wfr_firmware:5.3.0:build220428:*:*:*:*:*:*5.3.0 build220428VulnerableEZVIZ
cpe:2.3:h:ezviz:cs-c6n-a0-1c2wfr:-:*:*:*:*:*:*:*not specified by NVDRunning onEZVIZ
  • cpe:2.3:o:ezviz:cs-c6n-a0-1c2wfr_firmware:5.3.0:build220428:*:*:*:*:*:* Versions 5.3.0 build220428 Vulnerable ·EZVIZ
  • cpe:2.3:h:ezviz:cs-c6n-a0-1c2wfr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·EZVIZ

Remediation

  • Fix · CNA CS-C6N-A0-1C2WFR (EZVIZ) Fixed in 5.3.0 build 220428

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    EZVIZ CS-C6N-A0-1C2WFR 5.3.0 build 220428

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2022-02282 Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection componentPriority MEDIUM 46
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-2472
  2. 2026-10-03 Alias added: GHSA-5hpg-vprm-c7r7

References

Advisory 1

  • TI-2022-02282 Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component CVSS 3.1CRITICAL 9.9
  • TI-2023-26044 An authentication bypass vulnerability in the Direct Connection Module in Ezviz… CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences