HIGH🇬🇧 English

CVE-2023-5038

CVSS 8.7v4.0pub. 2024-06-25upd. 2024-11-21

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Hanwhavision Ane L6012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ane L6012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ane L7012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ane L7012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L6012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L6012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L6022r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L6022r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L6082r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L6082r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L7012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L7012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L7022r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L7022r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Ano L7082r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Ano L7082r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Anv L6012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Anv L6012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Anv L6082r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Anv L6082r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Anv L7012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Anv L7012r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Anv L7082r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Anv L7082r Firmware

    OS
    Hanwhavision
    < 1.41.16

  • Hanwhavision Lnd 6012r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Lnd 6012r Firmware

    OS
    Hanwhavision
    < 1.41.13

  • Hanwhavision Lnd 6022r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Lnd 6022r Firmware

    OS
    Hanwhavision
    < 1.41.13

  • Hanwhavision Lnd 6032r

    HW
    Hanwhavision
    wszystkie wersje

  • Hanwhavision Lnd 6032r Firmware

    OS
    Hanwhavision
    < 1.41.13
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-54012HIGH8.5ten sam produkt

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly ...

CVE-2024-54013HIGH8.7ten sam produkt

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web...

CVE-2023-5037HIGH7.1ten sam produkt

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the cam...

CVE-2023-31996HIGH8.8ten sam produkt

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special...

CVE-2025-8075MEDIUM5.8ten sam produkt

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS)...

CVE-2023-5038 — HIGH 8.7 | CVEbaza.pl