CVE-2023-6322
High
Description
A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability.
SeverityHigh
CVSS7.2
Exploit probability—
ProductRoku Indoor Camera Se Firmware
PublishedMay 15, 2024
First seenMay 15, 2024
Weakness typeCWE-121CWE-121
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| roku indoor_camera_se_firmware | 3.0.2.4679 | — |
| wyze cam_v3_firmware | 4.36.11.5859 | — |
| throughtek kalay_platform | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.