Veille CVE
CVE-2024-54013
8.8 ÉlevéeDescription
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds
Produits concernés
- Hanwha Vision QND-8080R
- Hanwhavision knb-2000 firmware
- Hanwhavision knb-5000n firmware
- Hanwhavision knd-2010 firmware
- Hanwhavision knd-2020rn firmware
- Hanwhavision knd-2080rn firmware
- Hanwhavision xnv-l6080 firmware
- Hanwhavision xnv-l6080a firmware
- Hanwhavision xnv-l6080r firmware
- Hanwhavision xnv-l6080ra firmware
- Hanwhavision xnz-6320 firmware
- Hanwhavision xnz-6320a firmware
- Hanwhavision xnz-l6320 firmware
- Hanwhavision xnz-l6320a firmware
- Hanwhavision knd-5020rn firmware
- Hanwhavision knd-5080rn firmware
- Hanwhavision kno-2010rn firmware
- Hanwhavision kno-2080rn firmware
- Hanwhavision kno-2120rn firmware
- Hanwhavision kno-5020rn firmware
- Hanwhavision kno-5080rn firmware
- Hanwhavision knp-2120hn firmware
- Hanwhavision knp-2320rh firmware
- Hanwhavision knp-2320rha firmware
- Hanwhavision knp-2550rha firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 8.7 Élevée | fc9afe74-3f80-4fb7-a313-e6f036a89882 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |