Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component

published 2022-09-15 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-34730

cvss: 9.9; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.5%; EPSS 1.5% chance of exploitation in 30 days, percentile 75%
public exploits: 0; none known

Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB1C-A0-1E2W2FR, CS-C6N-B0-1G2WF, CS-C3W-A0-3H4WFRL allows a remote attacker to execute remote code on the device. This issue affects: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725. EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428. EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802. EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712. EZVIZ CS-C3W-A0-3H4WFRL versions prior to 5.3.5 build 220723.

Patch / fix

fixed in 5

EZVIZ CS-CV248 5.2.3 build 220725
EZVIZ CS-C6N-A0-1C2WFR 5.3.0 build 220428
EZVIZ CS-DB1C-A0-1E2W2FR 5.3.0 build 220802
EZVIZ CS-C6N-B0-1G2WF 5.3.0 build 220712
EZVIZ CS-C3W-A0-3H4WFRL 5.3.5 build 220723

Exploit prediction

1.54% chance of exploitation in the next 30 days, higher than 75% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	9.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

EZVIZ CS-CV248
EZVIZ CS-C6N-A0-1C2WFR
EZVIZ CS-DB1C-A0-1E2W2FR
EZVIZ CS-C6N-B0-1G2WF
EZVIZ CS-C3W-A0-3H4WFRL

Classification

Weakness

CWE-121 Stack-based Buffer Overflow

References

bitdefender.com /blog/labs/vulnerabilities-identified-in-ezviz-smart-cams
third-party-advisory

Sources

CVE List CVE-2022-2471
NVD CVE-2022-2471

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary