Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2024-54012

Command Injection

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Knb-2000 Knb-2000 Firmware Knb-5000n and 504 more
CVE-2024-54013

Authentication Bypass

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Knb-2000 Knb-2000 Firmware Knb-5000n and 504 more
CVE-2024-54011

Missing Error/Exception Handling

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Knb-2000 Knb-2000 Firmware Knb-5000n and 504 more
CVE-2025-52598

Insufficient certificate validation

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Knb-2000 Knb-2000 Firmware Knb-5000n and 509 more
CVE-2023-5038

Unauthenticated DoS

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Hanwhavision
Products
Ane-l6012r Ane-l6012r Firmware Ane-l7012r and 363 more
CVE-2023-5037

Authenticated Command Injection

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS 4.0 · 7.1 High EPSS 1.5% KEV · Not listed
Vendors
Hanwhavision
Products
Ane-l6012r Ane-l6012r Firmware Ane-l7012r and 363 more