Authentication Bypass Vulnerability in Ezviz Products

CVE-2023-48121

What is CVE-2023-48121?

An authentication bypass vulnerability exists in the Direct Connection Module of several Ezviz camera models. This flaw allows remote attackers to bypass authentication mechanisms, enabling unauthorized access to sensitive information by sending specially crafted messages to the devices. Affected devices include the CS-C6N-xxx, CS-CV310-xxx, CS-C6CN-xxx, and CS-C3N-xxx models, all prior to the specified firmware version. Users are advised to update their devices promptly to safeguard against potential exploitation.

References