CVE-2023-45225

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While parsing certain XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.

• CWE-121
• CWE-787

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-03Third Party Advisory, US Government Resource

Published

Nov 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4522An issue has been discovered in GitLab affecting all version…5.3
• CVE-2023-45220The Android Client application, when enrolled with the defin…8.8
• CVE-2023-45221Improper buffer restrictions in Intel(R) Media SDK all versi…7.8
• CVE-2023-45222 An attacker with access to the web application that has t…5.4
• CVE-2023-45223Mattermost fails to properly validate the "Show Full Name" o…4.3
• CVE-2023-45224Rejected reason: This is unused.
• CVE-2023-45226 The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sid…7.4
• CVE-2023-45227 An attacker with access to the web applicatio…5.4
• CVE-2023-45228 The application suffers from improper access control when …6.5
• CVE-2023-45229EDK2's Network Package is susceptible to an out-of-bounds re…6.5
• CVE-2023-4523 Real Time Automation 460 Series products with versions prio…6.1
• CVE-2023-45230EDK2's Network Package is susceptible to a buffer overflow v…8.8