{"id":"CVE-2023-43755","aliases":["EUVD-2023-48132","GHSA-66rr-phv8-5jpp"],"status":"published","title":"Zavio IP Camera Stack-Based Buffer Overflow","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01624,"percentile":0.76445,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121","CWE-787"],"published":"2023-11-08T22:57:59Z","modified":"2026-06-17T06:26:22Z","products":[{"vendor":"zavio","product":"b8220_firmware"},{"vendor":"zavio","product":"b8520_firmware"},{"vendor":"zavio","product":"cb3211_firmware"},{"vendor":"zavio","product":"cb3212_firmware"},{"vendor":"zavio","product":"cb5220_firmware"},{"vendor":"zavio","product":"cb6231_firmware"},{"vendor":"zavio","product":"cd321_firmware"},{"vendor":"zavio","product":"cf7201_firmware"},{"vendor":"zavio","product":"cf7300_firmware"},{"vendor":"zavio","product":"cf7500_firmware"},{"vendor":"zavio","product":"cf7501_firmware"},{"vendor":"zavio","product":"ip camera b8220"},{"vendor":"zavio","product":"ip camera b8520"},{"vendor":"zavio","product":"ip camera cb3211"},{"vendor":"zavio","product":"ip camera cb3212"},{"vendor":"zavio","product":"ip camera cb5220"},{"vendor":"zavio","product":"ip camera cb6231"},{"vendor":"zavio","product":"ip camera cd321"},{"vendor":"zavio","product":"ip camera cf7201"},{"vendor":"zavio","product":"ip camera cf7300"},{"vendor":"zavio","product":"ip camera cf7500"},{"vendor":"zavio","product":"ip camera cf7501"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43755"},{"url":"https://github.com/advisories/GHSA-66rr-phv8-5jpp"}],"sources":{"cve":[{"id":"CVE-2023-43755","title":"Zavio IP Camera Stack-Based Buffer Overflow","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.\n\n","status":"published","published":"2023-11-08T22:57:59.332Z","modified":"2025-01-16T21:26:14.927Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-48132","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.\n\n","status":"published","published":"2023-11-08T22:57:59Z","modified":"2025-01-16T21:26:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:18.077485Z"}],"ghsa":[{"id":"GHSA-66rr-phv8-5jpp","title":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n...","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.\n\n","status":"published","published":"2023-11-09T00:33:57Z","modified":"2023-11-16T00:31:43Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:55:02.891904Z"}],"nvd":[{"id":"CVE-2023-43755","description":"Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.\n\n","status":"published","published":"2023-11-08T23:15:10.727Z","modified":"2026-06-17T06:26:22.423Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-121","CWE-787"],"updated_at":"2026-11-02T14:08:43.669554Z"}]}}