title: Stack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v3
description: Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected device. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.
problem types: CWE-121 Stack-based Buffer Overflow
affected:
{
product: Cam Pan v2
vendor: Wyze
versions:
lessThan: 4.49.1.47, status: affected, version: unspecified, versionType: custom
}
{
product: Cam v2
vendor: Wyze
versions:
lessThan: 4.9.8.1002, status: affected, version: unspecified, versionType: custom
}
{
product: Cam v3
vendor: Wyze
versions:
lessThan: 4.36.8.32, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
solutions: An update to the following firmware versions fixes the issue:
Wyze Cam Pan v2 firmware version 4.49.1.47.
Wyze Cam v2 firmware version 4.9.8.1002.
Wyze Cam v3 firmware version 4.36.8.32.