Veille CVE
CVE-2024-54012
5.3 MoyenneDescription
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.
Produits concernés
- Hanwha Vision QND-8080R
- Hanwhavision knb-2000 firmware
- Hanwhavision knb-5000n firmware
- Hanwhavision knd-2010 firmware
- Hanwhavision knd-2020rn firmware
- Hanwhavision knd-2080rn firmware
- Hanwhavision knd-5020rn firmware
- Hanwhavision knd-5080rn firmware
- Hanwhavision kno-2010rn firmware
- Hanwhavision kno-2080rn firmware
- Hanwhavision kno-2120rn firmware
- Hanwhavision kno-5020rn firmware
- Hanwhavision kno-5080rn firmware
- Hanwhavision knp-2120hn firmware
- Hanwhavision knp-2320rh firmware
- Hanwhavision knp-2320rha firmware
- Hanwhavision knp-2550rha firmware
- Hanwhavision pnd-a6081rv firmware
- Hanwhavision pnd-a9081rv firmware
- Hanwhavision pnm-7000vd firmware
- Hanwhavision pnm-7002vd firmware
- Hanwhavision pnm-9000vd firmware
- Hanwhavision pnm-9000vq firmware
- Hanwhavision pnm-9002vq firmware
- Hanwhavision pnm-9080vq firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 8.5 Élevée | fc9afe74-3f80-4fb7-a313-e6f036a89882 | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 5.3 Moyenne | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |