Guardzilla 180 Outdoor Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Guardzilla 180 Outdoor Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-18602 — CVSS 9.8 (critical): The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
• CVE-2018-18600 — CVSS 8.1 (high): The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.