Impact
Wansview 1.0.2 contains a stack-based buffer overflow (CWE-120) in the Camera name and DID number fields that are processed during camera addition. By supplying a 2000‑byte payload, an attacker can force the application to crash, resulting in a denial of service. The flaw does not provide a pathway to disclose information or execute arbitrary code.
Affected Systems
The vulnerability affects the Wansview camera firmware version 1.0.2. No other versions or vendor variants are listed in the advisory.
Risk and Exploitability
The CVSS score of 6.9 indicates moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation. The flaw is not listed in the CISA KEV catalog. Attacks require local access to the device and the privilege to add a camera; remote attackers cannot exploit the buffer overflow. Given the limited scope, the overall risk is moderate, but the impact is significant if an administrator inadvertently supplies oversized data.
OpenCVE Enrichment