CVE Feed

    Dashboard / CVE / CVE-2024-54012

    CVE-2024-54012

    Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

    Published:Apr 28, 2026
    Last Modified:Apr 28, 2026
    EPS:Apr 28, 2026
    EPSS Score:0.00022
    CVSS Score:8.5

    Affected Products

    Vendor
    Hanwhavision
    Product
    Qnd-8080r

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-54013 (CVSS 8.7) — Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web…
    CVE-2024-54011 (CVSS 5.3) — Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handl…
    CVE-2023-5038 (CVSS 8.7) — badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. …
    CVE-2023-5037 (CVSS 7.1) — badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the cam…
    CVE-2023-31996 (CVSS 8.8) — Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special…
    CVE-2023-31994 (CVSS 5.3) — Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is s…
    CVE-2023-31995 (CVSS 5.4) — Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High