CVE-2023-34551

HIGH

CVSS Score

Published: August 1, 2023 at 12:00 AM UTC

Updated: July 9, 2026 at 01:18 AM UTC

18 products affected across 1 vendorCs C6N B0-1g2wf FirmwareCs Cv310-a0-1c2wfr FirmwareCs Cv310-a0-1c2wfr C Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214. The impact is: execute arbitrary code (remote).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cs C6N A0-1c2wfr Mul Firmware · Ezviz

95%

v ≤ 5.3.2v < 5.3.25.3.2

Affected range stops below 5.3.2, so it looks safe — our inference, not a vendor statement

ezviz-cs-c6n-a0-1c2wfr-mul (same device)

Cs C6N B0-1g2wf Firmware · Ezviz

95%

v ≤ 5.3.0v < 5.3.05.3.0

Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement

ezviz-cs-c6n-b0-1g2wf (same device)

Cs C6N R101-1g2wf Firmware · Ezviz

95%

v ≤ 5.3.0v < 5.3.05.3.0

Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement

ezviz-cs-c6n-r101-1g2wf (same device)

Cs Cv248-a0-32wmfr Firmware · Ezviz

95%

v ≤ 5.2.3v < 5.2.35.2.3

Affected range stops below 5.2.3, so it looks safe — our inference, not a vendor statement

ezviz-cs-cv248-a0-32wmfr (same device)

Cs Cv310-a0-1b2wfr Firmware · Ezviz

95%

v ≤ 5.3.0v < 5.3.05.3.0

Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement

Cs Cv310-a0-1c2wfr C Firmware · Ezviz

95%

v ≤ 5.3.2v < 5.3.25.3.2

Affected range stops below 5.3.2, so it looks safe — our inference, not a vendor statement

ezviz-cs-cv310-a0-1c2wfr-c (same device)

Cs Cv310-a0-1c2wfr Firmware · Ezviz

95%

v ≤ 5.3.2v < 5.3.2

Affected range stops below 5.3.2, so it looks safe — our inference, not a vendor statement

Cs Cv310-a0-3c2wfrl 1080P Firmware · Ezviz

95%

v ≤ 5.2.7v < 5.2.75.2.7

Affected range stops below 5.2.7, so it looks safe — our inference, not a vendor statement

ezviz-cs-cv310-a0-3c2wfrl-1080p (same device)

LC1C Firmware · Ezviz

95%

v ≤ 5.3.4v < 5.3.45.3.4

Affected range stops below 5.3.4, so it looks safe — our inference, not a vendor statement

ezviz-lc1c (same device)

Cs Cv310-a0-1b2wfr · Ezviz

90%

v ≤ 5.3.0v < 5.3.05.3.0

Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.ezviz.com/data-security/security-notice/detail/827

References (2)

Source: [email protected]

http://ezviz.com

Vendor Advisory

Source: [email protected]

https://www.ezviz.com/data-security/security-notice/detail/827

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8HIGH[email protected]

Attack Vector: ADJACENT_NETWORK
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card