Wyze Cam V3 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Wyze Cam V3 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-6246 — CVSS 8.8 (high): Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
• CVE-2024-6249 — CVSS 8.8 (high): Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
• CVE-2023-6324 — CVSS 8.1 (high): ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
• CVE-2019-12266 — CVSS 7.6 (high): Stack-based Buffer Overflow vulnerability in Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to run arbitrary code on the affected…
• CVE-2024-6248 — CVSS 7.5 (high): Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
• CVE-2019-9564 — CVSS 7.5 (high): A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices…
• CVE-2023-6322 — CVSS 7.2 (high): A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and…
• CVE-2024-6247 — CVSS 6.8 (medium): Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to…
• CVE-2023-6323 — CVSS 4.3 (medium): ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.