Exploit Report

Computer Security And Bug Information

CVE-2024-4063

CVECVE-2024-4063
CVE Title
Published Date2024-04-23T19:15Z
Modified Date2024-04-24T13:39Z
CWE TypeCWE-295
DescriptionA vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The identifier VDB-261789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://vuldb.com/?id.261789
Reference Description VDB-261789 | EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation
Reference URLhttps://vuldb.com/?ctiid.261789
Reference Description VDB-261789 | CTI Indicators (IOB, IOC, TTP)
Reference URLhttps://vuldb.com/?submit.316408
Reference Description Submit #316408 | EZVIZ Camera model: CS-C6-21WFR-8, firmware: V5.2.7 build 170628 Improper Certificate Validation
Reference URLhttps://github.com/kzLiu2017/CVE_Document/blob/main/CVE_%20advisory_ezviz.pdf
Reference Description https://github.com/kzLiu2017/CVE_Document/blob/main/CVE_%20advisory_ezviz.pdf
Sources NIST MITRE
Note
  • No CVSS data for this CVE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles