CVE-2024-37066 MEDIUM

CVE-2024-37066

Vendor Wyze
Product Wyze Cam V4 Pro
Weakness CWE-78
Published July 19, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.

Key dates

02Disclosure timeline

July 19, 2024 CVE published
August 2, 2024 Record updated