PT-2022-8080 · Wyze · Wyze Cam V2+2

Bitdefender Labs · Published 2022-03-29 · Updated 2022-04-05 · CVE-2019-12266

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wyze Cam Pan v2 versions prior to 4.49.1.47 Wyze Cam v2 versions prior to 4.9.8.1002 Wyze Cam v3 versions prior to 4.36.8.32

Description A Stack-based Buffer Overflow issue allows an attacker to run arbitrary code on the affected device. This issue affects various Wyze Cam models, enabling attackers to execute arbitrary code.

Recommendations For Wyze Cam Pan v2 versions prior to 4.49.1.47, update to version 4.49.1.47 or later. For Wyze Cam v2 versions prior to 4.9.8.1002, update to version 4.9.8.1002 or later. For Wyze Cam v3 versions prior to 4.36.8.32, update to version 4.36.8.32 or later.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2019-12266

Affected Products

Wyze Cam Pan V2

Wyze Cam V2

Wyze Cam V3

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2019-12266 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12266 · Vendor Advisory
• https://t.me/rnetsec/16649 · Telegram Post
• https://t.me/cibsecurity/39873 · Telegram Post
• https://t.me/secharvester/12234 · Telegram Post
• https://t.me/defcon_news/99069 · Telegram Post
• https://t.me/ckure/11103 · Telegram Post
• https://t.me/nekaspersky/2048 · Telegram Post
• https://bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device · Note