{"id": "CVE-2023-3959", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "
[email protected]"}], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "
[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "
[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-11-08T23:15:08.523", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03", "tags": ["Third Party Advisory", "US Government Resource"], "source": "
[email protected]"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "
[email protected]", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "
[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras\n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. While \nprocessing XML elements from incoming network requests, the product does\n not sufficiently check or validate allocated buffer size. This may lead\n to remote code execution.\n\n"}, {"lang": "es", "value": "IP Cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220 y CD321 con versi\u00f3n de firmware M2.1.6.05 son vulnerables a m\u00faltiples instancias de desbordamientos basados en pila. Mientras procesa elementos XML de solicitudes de red entrantes, el producto no verifica ni valida suficientemente el tama\u00f1o del b\u00fafer asignado. Esto puede provocar la ejecuci\u00f3n remota de c\u00f3digo."}], "lastModified": "2024-11-21T08:18:24.233", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7500_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D543FC87-52FF-4BC4-BE57-949BB23D88AD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30F595D2-3CB4-4444-A01F-CE38CBE2D0DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7300_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FA43E48-E3D0-4913-9040-BF11D9E61385"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B008EE1F-5B08-417A-8206-20F1362DB911"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7201_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A6E3CDA-3C8B-4894-A42A-CFC5AA077047"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7201:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5240BE7-31E4-4A40-A480-E744E3CAEA3A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7501_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CF6549F-9E86-4B45-8B60-BB62BEB72B19"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7501:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9285F916-50BE-4E41-8EF3-97D882B54CD6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb3211_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F7DBB50-D334-493F-B661-04C798383D29"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb3211:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C32A113-76F5-4EBD-BD15-EFBB17F0942C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb3212_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "883549EB-5A5B-437E-8B10-D7C691142B92"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb3212:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FC86EF14-298F-414E-8558-1D025CDF6057"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb5220_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C43C9ED3-167E-4424-841E-50A56FF398F0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb5220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AFEC44B0-C2C7-4306-91CA-AA841B23498D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb6231_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E8483A6-426F-4595-8B7F-1FC04E9B31FF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb6231:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "766018BD-DD32-420A-9511-D97D9DE46BBA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:b8520_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "779DE260-60AA-465E-957D-B7502E806863"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:b8520:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F60E1FE1-F2E8-4BF7-A33D-4ED4D72BF360"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:b8220_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99AC7EEC-C4A5-4F79-9608-D02E29356217"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:b8220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8623A941-0514-49BD-967D-E347F6F99329"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cd321_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35DCACBC-6483-4113-BC77-041BE4D692F9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cd321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E906053-BE44-45B4-AD08-D7DFCFD5EDF2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "
[email protected]"}
