Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-34552: EZVIZ - Creating Easy Smart Homes

In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol can allow an unauthenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214.

CVE
#rce#buffer_overflow#auth#wifi
  • EZVIZ unveils exciting Prime Day 2023 deals on smart home devices, offering large discounts on its best items****EZVIZ is ready to enter people’s Prime Day shopping hauls with many highly attempted deals on its best-sellers, from advanced security cameras to internet-connected video doorbells. As one of the most anticipated sales events of the year, this Prime Day will witness how EZVIZ provides customers with cost-saving chances to level up their smart home experience with reliable and easy-to-use devices.

  • EZVIZ wins Red Dot’s Best of the Best Award, celebrating design excellence with its innovative Smart Home System****EZVIZ is thrilled to bring home the prestigious Red Dot 2023 Best of the Best Award, with its latest design – a groundbreaking smart home system kit. Called the “Ultimate Smart Home System Kit,” this winning product marks the first time EZVIZ to ever receive this “star jewel in the crown” of the esteemed Red Dot Awards.

  • EZVIZ announces its global tree-planting project in partnership with Treedom, greening the planet with the purchase of its eco-friendly products****EZVIZ has consolidated its long-term commitment to a greener future on World Environment Day 2023 by officially launching the EZVIZ Global Forest Plan.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907