CVE-2023-48121
Medium
Description
An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers to obtain sensitive information by sending crafted messages to the affected devices.
SeverityMedium
CVSS5.3
Exploit probability—
ProductEzviz Cs-c6n-a0-1c2wfr Firmware
PublishedNov 28, 2023
First seenNov 28, 2023
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ezviz cs-c6n-a0-1c2wfr_firmware | No range specified | — |
| ezviz cs-cv310-a0-1c2wfr_firmware | No range specified | — |
| ezviz cs-c6cn-a0-3h2wfr_firmware | No range specified | — |
| ezviz cs-c3n-a0-3h2wfrl_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.