HIGH🇬🇧 English

CVE-2024-54012

CVSS 8.5v4.0pub. 2026-04-28upd. 2026-06-27

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

oryginał EN
CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Hanwhavision Knb 2000

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knb 2000 Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knb 5000n

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knb 5000n Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2010

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knd 2010 Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2020rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knd 2020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2080rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knd 2080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 5020rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knd 5020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 5080rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knd 5080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2010rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Kno 2010rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2080rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Kno 2080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2120rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Kno 2120rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 5020rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Kno 5020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 5080rn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Kno 5080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2120hn

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knp 2120hn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2320rh

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knp 2320rha

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Knp 2320rha Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2320rh Firmware

    OS
    Hanwhavision
    < 2.23.01
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje

Powiązane podatności

CVE-2024-54013HIGH8.7ten sam produkt

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web...

CVE-2023-5038HIGH8.7ten sam produkt

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. ...

CVE-2023-5037HIGH7.1ten sam produkt

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the cam...

CVE-2023-31996HIGH8.8ten sam produkt

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special...

CVE-2024-54011MEDIUM5.3ten sam produkt

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handl...