Hanwhavision Pnv-A6081R Firmware vulnerabilities

CVE-2024-54013 [HIGH] CWE-306 CVE-2024-54013: Penetration Testing engineers at Amazon have identified a security flaw related to request handling Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

CVE-2024-54011 [MEDIUM] CWE-20 CVE-2024-54011: Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to prop Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVE-2024-54012 [MEDIUM] CWE-78 CVE-2024-54012: Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

CVE-2023-31994 [MEDIUM] CVE-2023-31994: Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP p Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.