Skip to content
OpenAdvisories
High · 8.7 CVE-2023-5038 EUVD-2023-57383GHSA-95c3-qh99-cvf2

Unauthenticated DoS

Published Jun 25, 2024 · Updated Aug 2, 2024 · Assigned by Hanwha_Vision

Description

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

VendorProductAffectedFixed
Hanwha Vision A-Series, Q-Series, PNM-series Camera Prior to version 1.41.16, Prior to version 2.22.00 —

References