Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-41883 EUVD-2024-38909GHSA-hch6-hfvx-h3mw

Null Pointer Dereference

Published Dec 24, 2024 · Updated Dec 24, 2024 · Assigned by Hanwha_Vision

Description

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the

NVR

. An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

VendorProductAffectedFixed
Hanwha Vision XRN-420S 5.01.62 and prior versions —

References