Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Zavio

First CVE: Jan 29, 2020Active for: 6 yearsTotal CVEs: 9

Zavio manufactures a line of compact IP cameras and firmware for small-business surveillance, with its vulnerability footprint concentrating across products such as the B8220, B8520, and CB6231 models. The vendor's disclosures skew strongly toward critical-severity outcomes and frequently acquire public exploit code, driven by recurrent memory-safety weaknesses—including stack-based buffer overflows and out-of-bounds writes—alongside authentication flaws such as hard-coded credentials and OS command injection that expose these devices to remote compromise. Defenders should prioritize inventory and network segmentation of affected camera models, as their internet-facing deployment and firmware-update inertia amplify exposure; live severity and exploitation counts are shown alongside this summary.

FAUCET AI Generated
9
Total CVEs
More Total CVEs than 91% of tracked vendors
0.2
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 1% of tracked vendors
9.3
Avg CVSS Score
Higher Avg CVSS Score than 89% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Zavio over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 29, 2020
6 years ago
Most Recent CVE
Nov 8, 2023
989 days ago

Products(26 total)

Top CVEs

Signals from CVEs in this vendor scope (9 CVEs).

9 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2013-2568CRITICAL
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute ar
Jan 29, 20209.867NOYES
CVE-2013-2570CRITICAL
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, whic
Jan 29, 20209.855NOYES
CVE-2023-3959CRITICAL
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances o
Nov 8, 20239.854NONO
CVE-2013-2569HIGH
A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain un
Jan 29, 20207.546NOYES
CVE-2013-2567HIGH
An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malici
Jan 29, 20207.540NOYES
CVE-2023-4249CRITICAL
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 has a command injection vulnerability
Nov 8, 20239.837NONO
CVE-2023-43755CRITICAL
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances
Nov 8, 20239.829NONO
CVE-2023-39435CRITICAL
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to stack-based overflows
Nov 8, 20239.827NONO
CVE-2023-45225CRITICAL
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras  with firmware version M2.1.6.05 are vulnerable to multiple instances o
Nov 8, 20239.826NONO
View all 9 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products9 CVEs
22%
78%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (9 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
44.4% of CVEs· 81st percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Zavio.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Zavio — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Zavio's Products

View all 2 CNAs →

Top CWEs