CVE-2026-32683
EZVIZ Cloud API Data Transmission Risk via Legacy Interfaces
Publication date: 2026-05-09
Last updated on: 2026-05-09
Assigner: Hangzhou Hikvision Digital Technology Co., Ltd.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ezviz | ezviz_app | to 7.3.0.0210 (exc) |
| ezviz | ezviz_app | to 7.3.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability involves older versions of cloud feature modules with legacy API interfaces that allow attackers to eavesdrop on network requests and obtain sensitive data.
Such unauthorized data exposure could potentially impact compliance with data protection regulations like GDPR and HIPAA, which require safeguarding personal and sensitive information during transmission.
Users are advised to upgrade to the latest app version and enable video encryption to mitigate the risk and better protect data privacy.
Can you explain this vulnerability to me?
This vulnerability affects some EZVIZ products that use older versions of cloud feature modules with legacy API interfaces. These outdated modules pose a risk during data transmission because attackers can exploit them by eavesdropping on network requests to obtain sensitive data.
How can this vulnerability impact me? :
The vulnerability allows attackers to intercept and eavesdrop on network communications between the EZVIZ app and cloud services, potentially exposing sensitive user data. This can lead to unauthorized access to personal information transmitted through the app.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, users should upgrade the EZVIZ app to the latest version available.
- Upgrade the EZVIZ app for iOS to version 7.3.1 or later.
- Upgrade the EZVIZ app for Android to version 7.3.0.0210 or later.
- Enable the video encryption feature within the app to protect data transmission.