CVE:CVE-2023-34552
CNNVD:CNNVD-202308-035
EZVIZ CS Series是中国萤石（EZVIZ）公司的一系列摄像头。
EZVIZ CS Series 存在安全漏洞，该漏洞源于SADP 组播协议的 mulicast_parse_sadp_packet 和 mulicast_get_pack_type 函数中包含两个基于堆栈的缓冲区溢出，允许与摄像机位于同一本地网络上的经过身份验证的攻击者实现远程代码执行，以下产品和版本受到影响：CS-C6N-B0-1G2WF V5.3.0(build 230215)之前版本、CS-C6N-R101-1G2WF V5.3.0(build 230215)之前版本、 CS-CV310-A0-1B2WFR V5.3.0(build 230221)之前版本、 CS-CV310-A0-1C2WFR-C V5.3.2(build 230221)之前版本、 CS-C6N-A0-1C2WFR-MUL V5.3.2(build 230218)之前版本、 CS-CV310-A0-3C2WFRL-1080p V5.2.7(build 230302)之前版本、 CS-CV310-A0-1C2WFR WIFI IP66 2.8mm 1080p V5.3.2(build 230214)之前版本、 CS-CV248-A0-32WMFR V5.2.3 (build 230217)之前版本、 萤石LC1C V5.3.4(build 230214) 之前版本。
solution:Upgrade ezviz cs-c6n-b0-1g2wf_firmware to a higher version than 5.3.0,and avoid the version (,5.3.0]; Upgrade ezviz cs-c6n-r101-1g2wf_firmware to a higher version than 5.3.0,and avoid the version (,5.3.0]; Upgrade ezviz cs-cv310-a0-1b2wfr_firmware to a higher version than 5.3.0,and avoid the version (,5.3.0]; Upgrade ezviz cs-cv310-a0-1c2wfr-c_firmware to a higher version than 5.3.2,and avoid the version (,5.3.2]; Upgrade ezviz cs-c6n-a0-1c2wfr-mul_firmware to a higher version than 5.3.2,and avoid the version (,5.3.2]; Upgrade ezviz cs-cv310-a0-3c2wfrl-1080p_firmware to a higher version than 5.2.7,and avoid the version (,5.2.7]; Upgrade ezviz cs-cv310-a0-1c2wfr_firmware to a higher version than 5.3.2,and avoid the version (,5.3.2]; Upgrade ezviz cs-cv248-a0-32wmfr_firmware to a higher version than 5.2.3,and avoid the version (,5.2.3]; Upgrade ezviz lc1c_firmware to a higher version than 5.3.4,and avoid the version (,5.3.4]