CVE-2019-9564 Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Wyze cam pan v2 firmware | < 4.49.1.47 | 4.49.1.47 |
| Wyze cam v2 firmware | < 4.9.8.1002 | 4.9.8.1002 |
| Wyze cam v3 firmware | < 4.36.8.32 | 4.36.8.32 |
| Wyze Cam Pan v2 | < 4.49.1.47 | 4.49.1.47 |
| Wyze Cam v2 | < 4.9.8.1002 | 4.9.8.1002 |
| Wyze Cam v3 | < 4.36.8.32 | 4.36.8.32 |
References
- www.bitdefender.com third-party-advisory