CVE-2023-43755

{"id": "CVE-2023-43755", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-11-08T23:15:10.727", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220,\n CB6231, B8520, B8220, and CD321 \n\nIP Cameras \n\nwith firmware version M2.1.6.05 are \nvulnerable to multiple instances of stack-based overflows. During the \nprocessing and parsing of certain fields in XML elements from incoming \nnetwork requests, the product does not sufficiently check or validate \nallocated buffer size. This may lead to remote code execution.\n\n"}, {"lang": "es", "value": "IP Cameras Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220 y CD321 con versi\u00f3n de firmware M2.1.6.05 son vulnerables a m\u00faltiples instancias de desbordamientos basados en pila. Durante el procesamiento y an\u00e1lisis de ciertos campos en elementos XML de solicitudes de red entrantes, el producto no verifica ni valida suficientemente el tama\u00f1o del b\u00fafer asignado. Esto puede provocar la ejecuci\u00f3n remota de c\u00f3digo."}], "lastModified": "2024-04-11T01:21:48.560", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7500_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D543FC87-52FF-4BC4-BE57-949BB23D88AD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "30F595D2-3CB4-4444-A01F-CE38CBE2D0DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7300_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FA43E48-E3D0-4913-9040-BF11D9E61385"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B008EE1F-5B08-417A-8206-20F1362DB911"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7201_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A6E3CDA-3C8B-4894-A42A-CFC5AA077047"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7201:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5240BE7-31E4-4A40-A480-E744E3CAEA3A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cf7501_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CF6549F-9E86-4B45-8B60-BB62BEB72B19"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cf7501:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9285F916-50BE-4E41-8EF3-97D882B54CD6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb3211_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F7DBB50-D334-493F-B661-04C798383D29"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb3211:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C32A113-76F5-4EBD-BD15-EFBB17F0942C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb3212_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "883549EB-5A5B-437E-8B10-D7C691142B92"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb3212:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FC86EF14-298F-414E-8558-1D025CDF6057"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb5220_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C43C9ED3-167E-4424-841E-50A56FF398F0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb5220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AFEC44B0-C2C7-4306-91CA-AA841B23498D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cb6231_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E8483A6-426F-4595-8B7F-1FC04E9B31FF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cb6231:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "766018BD-DD32-420A-9511-D97D9DE46BBA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:b8520_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "779DE260-60AA-465E-957D-B7502E806863"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:b8520:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F60E1FE1-F2E8-4BF7-A33D-4ED4D72BF360"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:b8220_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99AC7EEC-C4A5-4F79-9608-D02E29356217"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:b8220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8623A941-0514-49BD-967D-E347F6F99329"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zavio:cd321_firmware:m2.1.6.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35DCACBC-6483-4113-BC77-041BE4D692F9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zavio:cd321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E906053-BE44-45B4-AD08-D7DFCFD5EDF2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}