Описание
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds
Затрагиваемое ПО
Hanwhavision Knb-2000 firmwareHanwhavision Knb-2000Hanwhavision Knb-5000n firmwareHanwhavision Knb-5000nHanwhavision Knd-2010 firmwareHanwhavision Knd-2010Hanwhavision Knd-2020rn firmwareHanwhavision Knd-2020rnHanwhavision Knd-2080rn firmwareHanwhavision Knd-2080rnHanwhavision Xnv-l6080 firmwareHanwhavision Xnv-l6080Hanwhavision Xnv-l6080a firmwareHanwhavision Xnv-l6080aHanwhavision Xnv-l6080r firmwareHanwhavision Xnv-l6080rHanwhavision Xnv-l6080ra firmwareHanwhavision Xnv-l6080raHanwhavision Xnz-6320 firmwareHanwhavision Xnz-6320Hanwhavision Xnz-6320a firmwareHanwhavision Xnz-6320aHanwhavision Xnz-l6320 firmwareHanwhavision Xnz-l6320Hanwhavision Xnz-l6320a firmware
CVSS
| Балл | 8.8 — высокая |
| Вектор | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Источники
https://www.hanwhavision.com/wp-content/uploads/2026/04/Camera-Vulnerability-ReportCVE-2024-5401154013.pdf