cbcvebase.
CVE-2023-5038
published 2024-06-25

CVE-2023-5038: badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access…

PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.42%
33.9th percentile
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected

183 ranges· showing 25
VendorProductVersion rangeFixed in
hanwhavisionane-l6012r_firmware< 1.41.161.41.16
hanwhavisionane-l7012r_firmware< 1.41.161.41.16
hanwhavisionano-l6012r_firmware< 1.41.161.41.16
hanwhavisionano-l6022r_firmware< 1.41.161.41.16
hanwhavisionano-l6082r_firmware< 1.41.161.41.16
hanwhavisionano-l7012r_firmware< 1.41.161.41.16
hanwhavisionano-l7022r_firmware< 1.41.161.41.16
hanwhavisionano-l7082r_firmware< 1.41.161.41.16
hanwhavisionanv-l6012r_firmware< 1.41.161.41.16
hanwhavisionanv-l6023r_firmware< 1.41.161.41.16
hanwhavisionanv-l6082r_firmware< 1.41.161.41.16
hanwhavisionanv-l7012r_firmware< 1.41.161.41.16
hanwhavisionanv-l7082r_firmware< 1.41.161.41.16
hanwhavisionlnd-6012r_firmware< 1.41.131.41.13
hanwhavisionlnd-6022r_firmware< 1.41.131.41.13
hanwhavisionlnd-6032r_firmware< 1.41.131.41.13
hanwhavisionlnd-6072r_firmware< 1.41.131.41.13
hanwhavisionlno-6012r_firmware< 1.41.131.41.13
hanwhavisionlno-6022r_firmware< 1.41.131.41.13
hanwhavisionlno-6032r_firmware< 1.41.131.41.13
hanwhavisionlno-6072r_firmware< 1.41.131.41.13
hanwhavisionlnv-6012r_firmware< 1.41.131.41.13
hanwhavisionlnv-6022r_firmware< 1.41.131.41.13
hanwhavisionlnv-6032r_firmware< 1.41.131.41.13
hanwhavisionlnv-6072r_firmware< 1.41.131.41.13

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.