PT-2022-8312 · Wyze · Wyze Cam V2+2

Bitdefender Labs · Published 2022-03-29 · Updated 2023-02-22 · CVE-2019-9564

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wyze Cam Pan v2 versions prior to 4.49.1.47 Wyze Cam v2 versions prior to 4.9.8.1002 Wyze Cam v3 versions prior to 4.36.8.32

Description A vulnerability in the authentication logic of Wyze Cam devices allows an attacker to bypass login and control the devices.

Recommendations For Wyze Cam Pan v2 versions prior to 4.49.1.47, update to version 4.49.1.47 or later. For Wyze Cam v2 versions prior to 4.9.8.1002, update to version 4.9.8.1002 or later. For Wyze Cam v3 versions prior to 4.36.8.32, update to version 4.36.8.32 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-9564

Affected Products

Wyze Cam Pan V2

Wyze Cam V2

Wyze Cam V3

References · 9

• https://osv.dev/vulnerability/CVE-2019-9564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9564 · Security Note
• https://t.me/cibsecurity/39877 · Telegram Post
• https://t.me/rnetsec/16649 · Telegram Post
• https://t.me/secharvester/12234 · Telegram Post
• https://t.me/defcon_news/99069 · Telegram Post
• https://t.me/ckure/11103 · Telegram Post
• https://t.me/nekaspersky/2048 · Telegram Post
• https://bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device · Note