CVE-2022-2472: Improper Initialization vulnerability in local server authentication logic

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-09-15 · updated 2026-06-17
Weakness: CWE-665

Description

Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space containing the encrypted admin password. This issue affects: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428.

Affected products

EZVIZ CS-C6N-A0-1C2WFR: 5.3.0-build220428

References

https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-ezviz-smart-cams

Get alerted when CVE-2022-2472 or the next vulnerability affects your stack