CVE-2024-4063 - CVE House
Back to Database
Status published Low CVE-2024-4063

EZVIZ CS-C6-21WFR-8 Davinci Application certificate validation

Vulnerability Description

A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The identifier VDB-261789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-4063

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • kaizheng (VulDB User)

References

More from EZVIZ

View All →
CVE-2022-2472
Improper Initialization vulnerability in local server authentication logic
High 7.6
CVE-2022-2471
Stack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component
Critical 9.9

Affected Vendor

Affected Software

CS-C6-21WFR-8
Vulnerable Versions:
5.2.7 Build 170628

Timeline

Official Publish: April 23rd, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-295

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Credential Access
T1040 Network Sniffing
Collection
T1552 Unsecured Credentials
Credential Access
T1071 Application Layer Protocol
Command and Control
T1565 Data Manipulation
Impact