CVE-2023-4249

—

CVSS 3.1

9.8 critical

EPSS

13%p96

Published

Nov 8, 2023 (Nov 8, 2023)

Modified

Jun 17, 2026

Description

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.

Vendors: zavio
Products: cf7500 firmware, cf7300 firmware, cf7201 firmware, cf7501 firmware, cb3211 firmware, cb3212 firmware, cb5220 firmware, cb6231 firmware, b8520 firmware, b8220 firmware, cd321 firmware
Weakness: CWE-121, CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.9%)

In the news0 stories

No ingested article mentions this CVE yet.