CVE-2024-35344

View on CVE.org
Published May 28, 2024 CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed
Description
Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-35292 Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D880, IPC-D280, IPC-D3180, MC800N, YM500L, YM800N_N2, YMF50B, YM800SV2, YM500L8, and YM200E10 firmware v3.2.2.2 and lower and possibly more vendors/models of IP camera.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00197}

 epss

{'score': 0.00258}
Type Values Removed Values Added
Weaknesses CWE-321
Metrics cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Feb 13, 2025, 3:54 PM
Reserved
May 17, 2024, 12:00 AM

View source JSON

Updated
Aug 2, 2024, 3:07 AM

JSON

Status
Deferred
Published
May 28, 2024, 5:15 PM
Modified
Jun 17, 2026, 7:34 AM

View source JSON

No data.

No data.