CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-4249
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,
CB6231, B8520, B8220, and CD321
IP Cameras
with firmware version M2.1.6.05 has a
command injection vulnerability in their implementation of their
binaries and handling of network requests.
Severity
- EPSS
- 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-78, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zavio:b8220_firmware
- zavio:b8520_firmware
- zavio:cb3211_firmware
- zavio:cb3212_firmware
- zavio:cb5220_firmware
- zavio:cb6231_firmware
- zavio:cd321_firmware
- zavio:cf7201_firmware
- zavio:cf7300_firmware
- zavio:cf7500_firmware
- zavio:cf7501_firmware