{"resultsPerPage":9,"startIndex":0,"totalResults":9,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-05T02:08:17.762","vulnerabilities":[{"cve":{"id":"CVE-2019-12266","sourceIdentifier":"cve-requests@bitdefender.com","published":"2022-03-30T20:15:08.313","lastModified":"2026-06-17T02:14:20.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer en la región stack de la memoria en Wyze Cam Pan versión v2, Cam versión v2, Cam versión v3, permite a un atacante ejecutar código arbitrario en el dispositivo afectado. Este problema afecta a: Wyze Cam Pan versiones v2 anteriores a 4.49.1.47. Wyze Cam versiones v2 anteriores a 4.9.8.1002. Wyze Cam v3 versiones v3 anteriores a 4.36.8.32"}],"affected":[{"source":"cve-requests@bitdefender.com","affectedData":[{"vendor":"Wyze","product":"Cam Pan v2","versions":[{"version":"unspecified","lessThan":"4.49.1.47","versionType":"custom","status":"affected"}]},{"vendor":"Wyze","product":"Cam v2","versions":[{"version":"unspecified","lessThan":"4.9.8.1002","versionType":"custom","status":"affected"}]},{"vendor":"Wyze","product":"Cam v3","versions":[{"version":"unspecified","lessThan":"4.36.8.32","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-requests@bitdefender.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cve-requests@bitdefender.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_pan_v2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.49.1.47","matchCriteriaId":"FFB9B059-F660-4D9E-A8FE-4464E36520FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_pan_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"8D00DC99-9D9F-40D6-BBC6-82FB97B480B5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.9.8.1002","matchCriteriaId":"B9CD737D-C13D-4B2D-9C27-E13FEA352737"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"0A4D9556-1751-46C9-96C9-6C7994BE8BD1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.8.32","matchCriteriaId":"36A0BA09-1A2F-4389-988B-C2C51D3CEBC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/","source":"cve-requests@bitdefender.com","tags":["Third Party Advisory"]},{"url":"https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-9564","sourceIdentifier":"cve-requests@bitdefender.com","published":"2022-03-30T20:15:08.397","lastModified":"2026-06-17T02:43:57.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32."},{"lang":"es","value":"Una vulnerabilidad en la lógica de autenticación de Wyze Cam Pan v2, Cam v2, Cam v3 permite a un atacante eludir el inicio de sesión y controlar los dispositivos. Este problema afecta: Las versiones de Wyze Cam Pan v2 anteriores a la 4.49.1.47. Las versiones de Wyze Cam v2 anteriores a la 4.9.8.1002. Las versiones de Wyze Cam v3 anteriores a la 4.36.8.32"}],"affected":[{"source":"cve-requests@bitdefender.com","affectedData":[{"vendor":"Wyze","product":"Cam Pan v2","versions":[{"version":"unspecified","lessThan":"4.49.1.47","versionType":"custom","status":"affected"}]},{"vendor":"Wyze","product":"Cam v2","versions":[{"version":"unspecified","lessThan":"4.9.8.1002","versionType":"custom","status":"affected"}]},{"vendor":"Wyze","product":"Cam v3","versions":[{"version":"unspecified","lessThan":"4.36.8.32","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-requests@bitdefender.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_pan_v2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.49.1.47","matchCriteriaId":"FFB9B059-F660-4D9E-A8FE-4464E36520FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_pan_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"8D00DC99-9D9F-40D6-BBC6-82FB97B480B5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.9.8.1002","matchCriteriaId":"B9CD737D-C13D-4B2D-9C27-E13FEA352737"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"0A4D9556-1751-46C9-96C9-6C7994BE8BD1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.8.32","matchCriteriaId":"36A0BA09-1A2F-4389-988B-C2C51D3CEBC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/","source":"cve-requests@bitdefender.com","tags":["Third Party Advisory"]},{"url":"https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-6322","sourceIdentifier":"cve-requests@bitdefender.com","published":"2024-05-15T13:15:25.543","lastModified":"2026-06-17T06:50:32.270","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability."},{"lang":"es","value":"Existe una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en la funcionalidad de análisis de mensajes de Roku Indoor Camera SE versión 3.0.2.4679 y Wyze Cam v3 versión 4.36.11.5859. Un mensaje especialmente manipulado puede provocar un desbordamiento de búfer en la región stack de la memoria. Un atacante puede realizar solicitudes autenticadas para desencadenar esta vulnerabilidad."}],"affected":[{"source":"cve-requests@bitdefender.com","affectedData":[{"vendor":"Roku","product":"Indoor Camera SE","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"3.0.2.4679","versionType":"custom","status":"affected"}]},{"vendor":"Wyze","product":"Cam v3","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"4.36.11.5859","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v3","defaultStatus":"unknown","cpes":["cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*"],"versions":[{"version":"-","status":"affected"}]},{"vendor":"roku","product":"indoor_camera_se","defaultStatus":"unknown","cpes":["cpe:2.3:h:roku:indoor_camera_se:-:*:*:*:*:*:*:*"],"versions":[{"version":"-","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-requests@bitdefender.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-15T14:26:05.292848Z","id":"CVE-2023-6322","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve-requests@bitdefender.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.5859:*:*:*:*:*:*:*","matchCriteriaId":"4FE4DD58-8A90-43ED-B613-AB7D0BBA63A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:roku:indoor_camera_se_firmware:3.0.2.4679:*:*:*:*:*:*:*","matchCriteriaId":"B79DA37F-D435-470A-812C-5DB730F91A85"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:roku:indoor_camera_se:-:*:*:*:*:*:*:*","matchCriteriaId":"EF28236D-4618-4E8A-A8A5-60DD6104D9CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:throughtek:kalay_platform:-:*:*:*:*:*:*:*","matchCriteriaId":"4176E066-18DF-47D7-8604-2596C2F37EB6"}]}]}],"references":[{"url":"https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/","source":"cve-requests@bitdefender.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-37066","sourceIdentifier":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","published":"2024-07-19T12:15:02.320","lastModified":"2026-06-17T07:37:42.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process."},{"lang":"es","value":" Existe una vulnerabilidad de inyección de comandos en las versiones de firmware Wyze V4 Pro anteriores a la 4.50.4.9222, que permite a los atacantes ejecutar comandos arbitrarios a través de Bluetooth como root durante el proceso de configuración de la cámara."}],"affected":[{"source":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","affectedData":[{"vendor":"Wyze","product":"Wyze Cam V4 Pro","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"4.52.4.9887","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v4_pro","defaultStatus":"unknown","cpes":["cpe:2.3:a:wyze:cam_v4_pro:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"4.52.4.9887","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-19T15:24:53.197036Z","id":"CVE-2024-37066","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v4_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.52.4.9887","matchCriteriaId":"678B080B-FFD7-4303-8812-CAAF44E3CBBC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v4:*:*:*:*:*:*:*:*","matchCriteriaId":"B7966E04-5847-4556-AD80-A9EF9E27E9D7"}]}]}],"references":[{"url":"https://forums.wyze.com/t/security-advisory/289256","source":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","tags":["Vendor Advisory"]},{"url":"https://hiddenlayer.com/sai-security-advisory/2024-7-wyze/","source":"6f8de1f0-f67e-45a6-b68f-98777fdb759c","tags":["Exploit","Third Party Advisory"]},{"url":"https://forums.wyze.com/t/security-advisory/289256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://hiddenlayer.com/sai-security-advisory/2024-7-wyze/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6246","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-11-22T20:15:11.547","lastModified":"2026-06-17T08:17:37.257","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the Realtek Wi-Fi kernel module. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the kernel. Was ZDI-CAN-22310."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en montón del controlador Wi-Fi de Wyze Cam v3. Esta vulnerabilidad permite a los atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de las cámaras IP Wyze Cam v3. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe dentro del módulo del kernel de Wi-Fi de Realtek. El problema es el resultado de la falta de una validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en montón. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del kernel. Era ZDI-CAN-22310."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Wyze","product":"Cam v3","defaultStatus":"unknown","versions":[{"version":"4.36.11.7071","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.7071:*:*:*:*:*:*:*"],"versions":[{"version":"4.36.11.7071","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-26T15:16:12.893116Z","id":"CVE-2024-6246","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.11.8391","matchCriteriaId":"1F3FF9A5-721F-4735-B240-F52A42AD84F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-837/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6247","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-11-22T20:15:11.663","lastModified":"2026-06-17T08:17:37.367","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of SSIDs embedded in scanned QR codes. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22337."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código mediante inyección de comandos del sistema operativo SSID de Wi-Fi de Wyze Cam v3. Esta vulnerabilidad permite a atacantes físicamente presentes ejecutar código arbitrario en instalaciones afectadas de cámaras IP Wyze Cam v3. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe en el manejo de SSID integrados en códigos QR escaneados. El problema es el resultado de la falta de validación adecuada de una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la raíz. Era ZDI-CAN-22337."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Wyze","product":"Cam v3","defaultStatus":"unknown","versions":[{"version":"4.36.11.7071","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.7071:*:*:*:*:*:*:*"],"versions":[{"version":"4.36.11.7071","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-26T15:16:11.489845Z","id":"CVE-2024-6247","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.11.8391","matchCriteriaId":"1F3FF9A5-721F-4735-B240-F52A42AD84F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://forums.wyze.com/t/security-advisory/289256","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-838/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6248","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-11-22T20:15:11.783","lastModified":"2026-06-17T08:17:37.473","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the run_action_batch endpoint of the cloud infrastructure. The issue results from the use of the device's MAC address as a sole credential for authentication. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22393."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código mediante autenticación incorrecta en la infraestructura en la nube de Wyze Cam v3. Esta vulnerabilidad permite a los atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de las cámaras IP Wyze Cam v3. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe dentro del endpoint run_action_batch de la infraestructura en la nube. El problema es el resultado del uso de la dirección MAC del dispositivo como única credencial para la autenticación. Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto de la raíz. Era ZDI-CAN-22393."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Wyze","product":"Cam v3","defaultStatus":"unknown","versions":[{"version":"4.36.11.7071","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.7071:*:*:*:*:*:*:*"],"versions":[{"version":"4.36.11.7071","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-26T15:16:09.896085Z","id":"CVE-2024-6248","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.11.8391","matchCriteriaId":"1F3FF9A5-721F-4735-B240-F52A42AD84F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://forums.wyze.com/t/security-advisory/289256","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-839/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-6249","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-11-22T20:15:11.900","lastModified":"2026-06-17T08:17:37.580","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the TUTK P2P library. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22419."},{"lang":"es","value":"Vulnerabilidad de ejecución remota de código por desbordamiento de búfer basado en pila en el manejo de tráfico TCP de Wyze Cam v3. Esta vulnerabilidad permite a los atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de las cámaras IP Wyze Cam v3. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica existe dentro de la librería P2P de TUTK. El problema es el resultado de la falta de una validación adecuada de la longitud de los datos proporcionados por el usuario antes de copiarlos a un búfer basado en pila de longitud fija. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de la raíz. Era ZDI-CAN-22419."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Wyze","product":"Cam v3","defaultStatus":"unknown","versions":[{"version":"4.36.11.7071","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"wyze","product":"cam_v3_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:wyze:cam_v3_firmware:4.36.11.7071:*:*:*:*:*:*:*"],"versions":[{"version":"4.36.11.7071","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-26T15:16:08.116330Z","id":"CVE-2024-6249","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wyze:cam_v3_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.36.11.8391","matchCriteriaId":"1F3FF9A5-721F-4735-B240-F52A42AD84F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wyze:cam_v3:-:*:*:*:*:*:*:*","matchCriteriaId":"C96BD4E4-F38A-4D78-851D-0F879B4D3A16"}]}]}],"references":[{"url":"https://forums.wyze.com/t/security-advisory/289256","source":"zdi-disclosures@trendmicro.com","tags":["Product"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-840/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-50720","sourceIdentifier":"cve@mitre.org","published":"2026-08-19T14:17:32.130","lastModified":"2026-09-09T16:04:24.933","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modified SPL (Secondary Program Loader) images that pass secure boot verification without possession of the OEM signing key. Each forgery attempt succeeds with approximately 2/3 probability. This has been validated via reverse engineering, software emulation against vendor-signed images, and end-to-end hardware acceptance of a forged firmware image on a Wyze Video Doorbell v2 (T31X)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-24T19:59:03.546301Z","id":"CVE-2026-50720","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"references":[{"url":"https://opensensor.io/security/ingenic-t31-bootrom-partial-verification","source":"cve@mitre.org"}]}}]}