Remote Code Execution Vulnerability in Hanwha Vision NVR Products

CVE-2024-41885

What is CVE-2024-41885?

A newly identified vulnerability in Hanwha Vision's Network Video Recorder (NVR) products has been discovered that could potentially enable remote code execution by exploiting hardcoded encryption keys. The issue arises from the improper handling of seed strings in the encryption process, which could allow attackers to execute arbitrary code on affected devices. Hanwha Vision has acknowledged the issue and promptly released a firmware patch to address the vulnerability. Users are encouraged to update their systems immediately and refer to the manufacturer's advisory for detailed information and workarounds.

References