What’s Vulnerable › Vulnerabilities

CVE-2022-2471: Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-15 · updated 2026-06-17
• Weakness: CWE-121

Description

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Affected products

• EZVIZ Cs-C3W-A0-3H4Wfrl Firmware: 5.3.5-build220120
• EZVIZ CS-C6N-A0-1C2WFR: 5.3.0-build201719
• EZVIZ Cs-C6N-B0-1G2Wf Firmware: 5.3.0-build210731
• EZVIZ Cs-Cv248 Firmware: 5.2.1-build180403
• EZVIZ Cs-Db1C-A0-1E2W2Fr Firmware: 5.3.0-build211208

References

• https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
• https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams

Get alerted when CVE-2022-2471 or the next vulnerability affects your stack