WY
Vendor
Wyze
21
CVEs
0
On KEV
0
New 30D
Products
CV9.8
Cam V3 Firmware
Wyze
9 CVEs0 on KEV0 new
CV8.8
Cam v3
Wyze
5 CVEs0 on KEV0 new
CP9.8
Cam Pan V2 Firmware
Wyze
2 CVEs0 on KEV0 new
CV9.8
Cam V2 Firmware
Wyze
2 CVEs0 on KEV0 new
CV8.8
Cam V4 Firmware
Wyze
1 CVEs0 on KEV0 new
CV8.8
Cam V4 Pro
Wyze
1 CVEs0 on KEV0 new
WC8.8
Wyze Cam V4 Pro
Wyze
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-6249 | CV Cam v3 Wyze | 8.8 | Nov 22 | Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-6248 | CV Cam v3 Wyze | 7.5 | Nov 22 | Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability |
| CVE-2024-6247 | CV Cam v3 Wyze | 6.8 | Nov 22 | Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability |
| CVE-2024-6246 | CV Cam v3 Wyze | 8.8 | Nov 22 | Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2024-37066 | WC Wyze Cam V4 Pro Wyze | 8.8 | Jul 19 | A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during… |
| CVE-2023-6324 | CV Cam V3 Firmware Wyze | 8.8 | May 15 | ThroughTek Kalay SDK error in handling the PSK identity |
| CVE-2023-6323 | CV Cam V3 Firmware Wyze | 6.5 | May 15 | ThroughTek Kalay SDK insufficient verification of message authenticity |
| CVE-2023-6322 | CV Cam v3 Wyze | 8.8 | May 15 | Stack-based buffer overflow in message parser functionality |
| CVE-2019-9564 | CP Cam Pan V2 Firmware Wyze | 9.8 | Mar 30 | A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices |
| CVE-2019-12266 | CP Cam Pan V2 Firmware Wyze | 9.8 | Mar 30 | Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device |