Skip to main content
Threat Radar animated logo

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/wyze/cam-v3

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2024-6248: CWE-287: Improper Authentication in Wyze Cam v3CVE-2024-6248
0

Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the run_action_batch endpoint of the cloud infrastructure. The issue results from the use of the device's MAC address as a sole credential for authentication. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22393.

HighVulnerabilityUnited StatesUnited StatesCanadaCanadaUnited KingdomUnited Kingdom+6#cve#cve-2024-6248#cwe-287
Join the discussion
CVE-2024-6247: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Wyze Cam v3CVE-2024-6247
0

Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSIDs embedded in scanned QR codes. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22337.

MediumVulnerabilityUnited StatesUnited StatesCanadaCanadaUnited KingdomUnited Kingdom+7#cve#cve-2024-6247#cwe-78
Join the discussion

Showing 1 to 2 of 2 results

Filters:Package: pkg:github/wyze/cam-v3
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses