CVE-2023-4249: Zavio b8220 Firmware

Critical severity, CVSS 9.8. EPSS: 12.9% chance of exploitation in the next 30 days.

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability in their implementation of their binaries and handling of network requests.

Affected products

• Zavio b8220 Firmware: version m2.1.6.05 only
• Zavio b8520 Firmware: version m2.1.6.05 only
• Zavio CB3211 Firmware: version m2.1.6.05 only
• Zavio CB3212 Firmware: version m2.1.6.05 only
• Zavio CB5220 Firmware: version m2.1.6.05 only
• Zavio CB6231 Firmware: version m2.1.6.05 only
• Zavio CD321 Firmware: version m2.1.6.05 only
• Zavio CF7201 Firmware: version m2.1.6.05 only
• Zavio CF7300 Firmware: version m2.1.6.05 only
• Zavio CF7500 Firmware: version m2.1.6.05 only
• Zavio CF7501 Firmware: version m2.1.6.05 only

Published 2023-11-08. Last modified 2026-06-17.