Authenticated Command Injection
CVE-2023-5037
7.2HIGH
Key Information:
- Vendor
Hanwha Vision Co., Ltd.
- Vendor
- CVE Published:
- 13 November 2023
What is CVE-2023-5037?
A security vulnerability exists within Hanwha Vision cameras that permits authenticated attackers to execute arbitrary commands through crafted request packets. Security Researcher badmonkey discovered that by exploiting this flaw, unauthorized command executions can be achieved, thereby jeopardizing the camera's integrity and security. The vendor has provided firmware updates to mitigate this risk. Users are urged to apply the recommended patches and consult the manufacturer's advisory for comprehensive details on the issue and available workarounds.
Affected Version(s)
A-Series, Q-Series, PNM-series Camera Prior to version 1.41.16;Prior to version 2.22.00;