vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-34552

HIGH
8.8
CVSS Score
Published: August 1, 2023 at 12:00 AM UTC
Updated: July 9, 2026 at 01:18 AM UTC
18 products affected across 1 vendorCs C6N B0-1g2wf FirmwareCs Cv310-a0-1c2wfr FirmwareCs Cv310-a0-1c2wfr C Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP multicast protocol can allow an unauthenticated attacker present on the same local network as the camera to achieve remote code execution. This affects CS-C6N-B0-1G2WF Firmware versions before V5.3.0 build 230215 and CS-C6N-R101-1G2WF Firmware versions before V5.3.0 build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Cs C6N A0-1c2wfr Mul Firmware· Ezviz
95%
v ≤ 5.3.2v < 5.3.05.3.2
Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement
ezviz-cs-c6n-a0-1c2wfr-mul (same device)
Cs C6N B0-1g2wf Firmware· Ezviz
95%
v ≤ 5.3.0
ezviz-cs-c6n-b0-1g2wf (same device)
Cs C6N R101-1g2wf Firmware· Ezviz
95%
v ≤ 5.3.0v < 5.3.05.3.0
Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement
ezviz-cs-c6n-r101-1g2wf (same device)
Cs Cv248-a0-32wmfr Firmware· Ezviz
95%
v ≤ 5.2.3
ezviz-cs-cv248-a0-32wmfr (same device)
Cs Cv310-a0-1b2wfr Firmware· Ezviz
95%
v ≤ 5.3.0
Cs Cv310-a0-1c2wfr C Firmware· Ezviz
95%
v ≤ 5.3.2
ezviz-cs-cv310-a0-1c2wfr-c (same device)
Cs Cv310-a0-1c2wfr Firmware· Ezviz
95%
v ≤ 5.3.2
Cs Cv310-a0-3c2wfrl 1080P Firmware· Ezviz
95%
v ≤ 5.2.7
ezviz-cs-cv310-a0-3c2wfrl-1080p (same device)
LC1C Firmware· Ezviz
95%
v ≤ 5.3.4
ezviz-lc1c (same device)
Cs Cv310-a0-1b2wfr· Ezviz
90%
v ≤ 5.3.0v < 5.3.0
Affected range stops below 5.3.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Source: [email protected]
http://ezviz.com
Vendor Advisory
Source: [email protected]
https://www.ezviz.com/data-security/security-notice/detail/827

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGH[email protected]
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787CWE-121

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card