HIGH🇵🇱 Wersja polska

CVE-2024-54012

CVSS 8.5v4.0pub. 2026-04-28upd. 2026-06-27

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Hanwhavision Knb 2000

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knb 2000 Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knb 5000n

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knb 5000n Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2010

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knd 2010 Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2020rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knd 2020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 2080rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knd 2080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 5020rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knd 5020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knd 5080rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knd 5080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2010rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Kno 2010rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2080rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Kno 2080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 2120rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Kno 2120rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 5020rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Kno 5020rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Kno 5080rn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Kno 5080rn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2120hn

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knp 2120hn Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2320rh

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knp 2320rha

    HW
    Hanwhavision
    all versions

  • Hanwhavision Knp 2320rha Firmware

    OS
    Hanwhavision
    < 2.23.01

  • Hanwhavision Knp 2320rh Firmware

    OS
    Hanwhavision
    < 2.23.01
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2024-54013HIGH8.7same product

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web...

CVE-2023-5038HIGH8.7same product

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. ...

CVE-2023-5037HIGH7.1same product

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the cam...

CVE-2023-31996HIGH8.8same product

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special...

CVE-2024-54011MEDIUM5.3same product

Inżynierowie testujący penetracyjnie w Amazon odkryli lukę, w której system kamerowy nie obsługuje prawidłowo ...