Command injection via wave install file

CVE-2023-5747

What is CVE-2023-5747?

A security flaw has been identified in the Wave server application utilized in camera devices from HanwhaVision. This vulnerability enables attackers to exploit command injection during the installation process, potentially allowing unauthorized execution of arbitrary code on the device. HanwhaVision has issued a security patch to address this issue, which is crucial for protecting the integrity and security of their camera system. Users are urged to update their firmware as recommended in the vendor advisory.

References