{"id":"CVE-2023-39435","aliases":["EUVD-2023-43159","GHSA-75fp-j7f7-j7j8"],"status":"published","title":"Zavio IP Camera Stack-Based Buffer Overflow","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to stack-based overflows. During the process of updating \ncertain settings sent from incoming network requests, the product does \nnot sufficiently check or validate allocated buffer size. This may lead \nto remote code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01579,"percentile":0.75672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2023-11-08T22:54:00Z","modified":"2026-06-17T06:12:19Z","products":[{"vendor":"zavio","product":"b8220_firmware"},{"vendor":"zavio","product":"b8520_firmware"},{"vendor":"zavio","product":"cb3211_firmware"},{"vendor":"zavio","product":"cb3212_firmware"},{"vendor":"zavio","product":"cb5220_firmware"},{"vendor":"zavio","product":"cb6231_firmware"},{"vendor":"zavio","product":"cd321_firmware"},{"vendor":"zavio","product":"cf7201_firmware"},{"vendor":"zavio","product":"cf7300_firmware"},{"vendor":"zavio","product":"cf7500_firmware"},{"vendor":"zavio","product":"cf7501_firmware"},{"vendor":"zavio","product":"ip camera b8220"},{"vendor":"zavio","product":"ip camera b8520"},{"vendor":"zavio","product":"ip camera cb3211"},{"vendor":"zavio","product":"ip camera cb3212"},{"vendor":"zavio","product":"ip camera cb5220"},{"vendor":"zavio","product":"ip camera cb6231"},{"vendor":"zavio","product":"ip camera cd321"},{"vendor":"zavio","product":"ip camera cf7201"},{"vendor":"zavio","product":"ip camera cf7300"},{"vendor":"zavio","product":"ip camera cf7500"},{"vendor":"zavio","product":"ip camera cf7501"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39435"},{"url":"https://github.com/advisories/GHSA-75fp-j7f7-j7j8"}],"sources":{"cve":[{"id":"CVE-2023-39435","title":"Zavio IP Camera Stack-Based Buffer Overflow","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to stack-based overflows. During the process of updating \ncertain settings sent from incoming network requests, the product does \nnot sufficiently check or validate allocated buffer size. This may lead \nto remote code execution.\n\n","status":"published","published":"2023-11-08T22:54:00.819Z","modified":"2025-01-16T21:26:22.506Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-43159","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to stack-based overflows. During the process of updating \ncertain settings sent from incoming network requests, the product does \nnot sufficiently check or validate allocated buffer size. This may lead \nto remote code execution.\n\n","status":"published","published":"2023-11-08T22:54:00Z","modified":"2025-01-16T21:26:22Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:18.077485Z"}],"ghsa":[{"id":"GHSA-75fp-j7f7-j7j8","title":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP...","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to stack-based overflows. During the process of updating \ncertain settings sent from incoming network requests, the product does \nnot sufficiently check or validate allocated buffer size. This may lead \nto remote code execution.\n\n","status":"published","published":"2023-11-09T00:33:56Z","modified":"2023-11-24T05:05:35Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:55:05.78804Z"}],"nvd":[{"id":"CVE-2023-39435","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 IP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to stack-based overflows. During the process of updating \ncertain settings sent from incoming network requests, the product does \nnot sufficiently check or validate allocated buffer size. This may lead \nto remote code execution.\n\n","status":"published","published":"2023-11-08T23:15:08.31Z","modified":"2026-06-17T06:12:19.647Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:08:43.669554Z"}]}}