Search criteria

10 vulnerabilities found for ano-l7082r_firmware by hanwhavision

CVE-2023-5038 (GCVE-0-2023-5038)

Vulnerability from nvd – Published: 2024-06-25 02:14 – Updated: 2024-08-02 07:44
VLAI?
Title
Unauthenticated DoS
Summary
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CWE
  • CWE-703 - Improper Check or Handling of Exceptional Conditions
  • CWE-248 - Uncaught Exception
Assigner
References
Impacted products
Vendor Product Version
Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera Affected: Prior to version 1.41.16, Prior to version 2.22.00
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5038",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-26T16:44:21.978973Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-26T23:04:59.868Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:44:53.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "A-Series, Q-Series, PNM-series Camera",
          "vendor": "Hanwha Vision Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to version 1.41.16, Prior to version 2.22.00"
            }
          ]
        }
      ],
      "datePublic": "2024-06-25T02:05:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cdiv\u003e\u003cdiv\u003ebadmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds.\u003c/div\u003e\u003c/div\u003e\n\n"
            }
          ],
          "value": "badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-703",
              "description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-25T02:14:06.610Z",
        "orgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
        "shortName": "Hanwha_Vision"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unauthenticated DoS",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
    "assignerShortName": "Hanwha_Vision",
    "cveId": "CVE-2023-5038",
    "datePublished": "2024-06-25T02:14:06.610Z",
    "dateReserved": "2023-09-18T06:00:29.464Z",
    "dateUpdated": "2024-08-02T07:44:53.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5037 (GCVE-0-2023-5037)

Vulnerability from nvd – Published: 2023-11-13 07:42 – Updated: 2024-08-02 07:44
VLAI?
Title
Authenticated Command Injection
Summary
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CWE
  • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
Vendor Product Version
Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera Affected: Prior to version 1.41.16;Prior to version 2.22.00;
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5037",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-26T23:04:45.931319Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-26T23:04:52.824Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:44:53.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "A-Series, Q-Series, PNM-series Camera",
          "vendor": "Hanwha Vision Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to version 1.41.16;Prior to version 2.22.00;"
            }
          ]
        }
      ],
      "datePublic": "2024-06-25T02:03:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cdiv\u003e\u003cdiv\u003ebadmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds.\u003c/div\u003e\u003c/div\u003e\n\n"
            }
          ],
          "value": "badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-25T02:04:22.363Z",
        "orgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
        "shortName": "Hanwha_Vision"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authenticated Command Injection",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
    "assignerShortName": "Hanwha_Vision",
    "cveId": "CVE-2023-5037",
    "datePublished": "2023-11-13T07:42:00.337Z",
    "dateReserved": "2023-09-18T05:54:35.205Z",
    "dateUpdated": "2024-08-02T07:44:53.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31996 (GCVE-0-2023-31996)

Vulnerability from nvd – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:33
VLAI?
Summary
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31996",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:33:40.412965Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-77",
                "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:33:53.956Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-26T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31996",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:33:53.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31995 (GCVE-0-2023-31995)

Vulnerability from nvd – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:38
VLAI?
Summary
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31995",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:38:38.130514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:38:42.192Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31995",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:38:42.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31994 (GCVE-0-2023-31994)

Vulnerability from nvd – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:42
VLAI?
Summary
Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31994",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:42:01.240259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:42:07.446Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31994",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:42:07.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5038 (GCVE-0-2023-5038)

Vulnerability from cvelistv5 – Published: 2024-06-25 02:14 – Updated: 2024-08-02 07:44
VLAI?
Title
Unauthenticated DoS
Summary
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CWE
  • CWE-703 - Improper Check or Handling of Exceptional Conditions
  • CWE-248 - Uncaught Exception
Assigner
References
Impacted products
Vendor Product Version
Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera Affected: Prior to version 1.41.16, Prior to version 2.22.00
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5038",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-26T16:44:21.978973Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-26T23:04:59.868Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:44:53.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "A-Series, Q-Series, PNM-series Camera",
          "vendor": "Hanwha Vision Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to version 1.41.16, Prior to version 2.22.00"
            }
          ]
        }
      ],
      "datePublic": "2024-06-25T02:05:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cdiv\u003e\u003cdiv\u003ebadmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds.\u003c/div\u003e\u003c/div\u003e\n\n"
            }
          ],
          "value": "badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-703",
              "description": "CWE-703: Improper Check or Handling of Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-248",
              "description": "CWE-248: Uncaught Exception",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-25T02:14:06.610Z",
        "orgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
        "shortName": "Hanwha_Vision"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unauthenticated DoS",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
    "assignerShortName": "Hanwha_Vision",
    "cveId": "CVE-2023-5038",
    "datePublished": "2024-06-25T02:14:06.610Z",
    "dateReserved": "2023-09-18T06:00:29.464Z",
    "dateUpdated": "2024-08-02T07:44:53.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-5037 (GCVE-0-2023-5037)

Vulnerability from cvelistv5 – Published: 2023-11-13 07:42 – Updated: 2024-08-02 07:44
VLAI?
Title
Authenticated Command Injection
Summary
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
CWE
  • CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
Vendor Product Version
Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera Affected: Prior to version 1.41.16;Prior to version 2.22.00;
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l6082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l6082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ane-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ane-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7082r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7082r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:ano-l7022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ano-l7022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:anv-l7012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "anv-l7012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-c9022rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-c9022rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9000qb:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9000qb",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7002vd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7002vd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-8082vt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-8082vt",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9002vq:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9002vq",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9022v:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9022v",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.00",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9031rv:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9031rv",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.01",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084qz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084qz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9084rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9084rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9085rqz1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9085rqz1",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-9322vqp:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-9322vqp",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-7082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-7082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:pnm-12082rvd:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pnm-12082rvd",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "2.22.02",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6072r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6072r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lnv-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lnv-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:lno-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "lno-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6011:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6011",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6012r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6012r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6021:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6021",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6022r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6022r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:hanwhavision:qnd-6032r:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qnd-6032r",
            "vendor": "hanwhavision",
            "versions": [
              {
                "lessThan": "1.41.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5037",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-26T23:04:45.931319Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-26T23:04:52.824Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:44:53.823Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "A-Series, Q-Series, PNM-series Camera",
          "vendor": "Hanwha Vision Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Prior to version 1.41.16;Prior to version 2.22.00;"
            }
          ]
        }
      ],
      "datePublic": "2024-06-25T02:03:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cdiv\u003e\u003cdiv\u003ebadmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds.\u003c/div\u003e\u003c/div\u003e\n\n"
            }
          ],
          "value": "badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer\u0027s report for details and workarounds."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-25T02:04:22.363Z",
        "orgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
        "shortName": "Hanwha_Vision"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authenticated Command Injection",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "fc9afe74-3f80-4fb7-a313-e6f036a89882",
    "assignerShortName": "Hanwha_Vision",
    "cveId": "CVE-2023-5037",
    "datePublished": "2023-11-13T07:42:00.337Z",
    "dateReserved": "2023-09-18T05:54:35.205Z",
    "dateUpdated": "2024-08-02T07:44:53.823Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31994 (GCVE-0-2023-31994)

Vulnerability from cvelistv5 – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:42
VLAI?
Summary
Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31994",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:42:01.240259Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:42:07.446Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31994",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:42:07.446Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31995 (GCVE-0-2023-31995)

Vulnerability from cvelistv5 – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:38
VLAI?
Summary
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31995",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:38:38.130514Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:38:42.192Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31995",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:38:42.192Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-31996 (GCVE-0-2023-31996)

Vulnerability from cvelistv5 – Published: 2023-05-23 00:00 – Updated: 2025-01-17 16:33
VLAI?
Summary
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.
CWE
  • n/a
Assigner
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:03:28.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://hanwhavisionamerica.com/download/50042/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-31996",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-17T16:33:40.412965Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-77",
                "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-17T16:33:53.956Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-26T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf"
        },
        {
          "url": "https://hanwhavisionamerica.com/download/50042/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-31996",
    "datePublished": "2023-05-23T00:00:00",
    "dateReserved": "2023-04-29T00:00:00",
    "dateUpdated": "2025-01-17T16:33:53.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}