Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-5038

Unauthenticated DoS

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Ane-l6012r Ane-l6012r Firmware Ane-l7012r and 363 more
CVE-2023-5037

Authenticated Command Injection

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 7.1 High EPSS 1.5% KEV · Not listed
Vendors
Hanwhavision
Products
Ane-l6012r Ane-l6012r Firmware Ane-l7012r and 363 more