Remote Code Execution Vulnerability in Hanwha Vision NVR Products

CVE-2024-41884

What is CVE-2024-41884?

A vulnerability has been identified in Hanwha Vision's Network Video Recorder (NVR) products that allows attackers to execute arbitrary code remotely. This issue arises when an attacker fails to provide a value for a specific URL parameter, leading to NULL pointer references that cause the NVR to reboot unexpectedly. Users are strongly advised to implement the firmware patch released by the manufacturer to mitigate this issue. For more information on the vulnerability and available workarounds, please refer to the manufacturer's advisory report.

References