Remote Code Execution Vulnerability Affecting Hanwha Vision NVRs

CVE-2024-41883

What is CVE-2024-41883?

A potential security flaw has been identified in Hanwha Vision's Network Video Recorders (NVR), where an attacker can exploit a specific URL parameter to trigger a NULL pointer reference. This exploit could lead to unintended behavior, including a system reboot of the NVR device. Users are strongly encouraged to apply the latest firmware patch provided by the manufacturer to mitigate this vulnerability. For further information and detailed workarounds, please refer to the manufacturer's security advisory.

References