Hanwha Vision Qnd-8080R vulnerabilities

CVE-2024-54013 [HIGH] CWE-306 CVE-2024-54013: Penetration Testing engineers at Amazon have identified a security flaw related to request handling Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

CVE-2024-54011 [MEDIUM] CWE-20 CVE-2024-54011: Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to prop Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVE-2024-54012 [MEDIUM] CWE-78 CVE-2024-54012: Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.