CVE-2021-3555

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-05-31 · updated 2026-06-17
Weakness: CWE-120

Description

A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions.

Affected products

Eufylife Solo Indoorcam C24 Firmware: through 2.0.9.3
Eufylife Solo Indoorcam P24 Firmware: through 2.0.9.3

References

https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-eufy2k-indoor-camera/
https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-eufy2k-indoor-camera/

Get alerted when CVE-2021-3555 or the next vulnerability affects your stack