https://vulnogram.org/ Most recent CVEs assigned by Hanwha Vision Co., Ltd. (hanwha_vision). https://vulnogram.org/seaview/icons/hanwha_vision.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2024-54013 https://vulnogram.org/CVE-2024-54013 Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patc… High Tue, 28 Apr 2026 07:06:17 GMT https://vulnogram.org/CVE-2024-54012 https://vulnogram.org/CVE-2024-54012 Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has release… High Tue, 28 Apr 2026 07:03:58 GMT https://vulnogram.org/CVE-2024-54011 https://vulnogram.org/CVE-2024-54011 Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer t… Medium Tue, 28 Apr 2026 06:51:33 GMT https://vulnogram.org/CVE-2025-8075 https://vulnogram.org/CVE-2025-8075 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow a… Medium Fri, 26 Dec 2025 04:31:38 GMT https://vulnogram.org/CVE-2025-52601 https://vulnogram.org/CVE-2025-52601 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacke… Medium Fri, 26 Dec 2025 04:29:25 GMT https://vulnogram.org/CVE-2025-52600 https://vulnogram.org/CVE-2025-52600 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allo… Medium Fri, 26 Dec 2025 04:20:17 GMT https://vulnogram.org/CVE-2025-52599 https://vulnogram.org/CVE-2025-52599 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission management for camera guest account. The manufacturer has released patch firmw… Medium Network Exploitable Fri, 26 Dec 2025 04:12:37 GMT https://vulnogram.org/CVE-2025-52598 https://vulnogram.org/CVE-2025-52598 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation. The manufacturer has released p… Medium Network Exploitable Fri, 26 Dec 2025 04:07:19 GMT https://vulnogram.org/CVE-2024-41882 https://vulnogram.org/CVE-2024-41882 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can cause a stack overflow by entering large data into URL parameters, which will result in a system reboot. The manufacturer has rel… Medium Tue, 24 Dec 2024 05:35:11 GMT https://vulnogram.org/CVE-2024-41883 https://vulnogram.org/CVE-2024-41883 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer… Medium Tue, 24 Dec 2024 05:32:41 GMT https://vulnogram.org/CVE-2024-41884 https://vulnogram.org/CVE-2024-41884 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur and the NVR will reboot. The manufacture… Medium Tue, 24 Dec 2024 05:30:41 GMT https://vulnogram.org/CVE-2024-41885 https://vulnogram.org/CVE-2024-41885 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. The seed string for the encrypt key was hardcoding. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's… Medium Tue, 24 Dec 2024 05:27:39 GMT https://vulnogram.org/CVE-2024-41886 https://vulnogram.org/CVE-2024-41886 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, p… Medium Tue, 24 Dec 2024 05:23:52 GMT https://vulnogram.org/CVE-2024-41887 https://vulnogram.org/CVE-2024-41887 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The ma… Medium Tue, 24 Dec 2024 05:20:40 GMT https://vulnogram.org/CVE-2023-5038 https://vulnogram.org/CVE-2023-5038 badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it… High Network Exploitable Tue, 25 Jun 2024 02:14:06 GMT https://vulnogram.org/CVE-2023-6116 https://vulnogram.org/CVE-2023-6116 Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the f… High Network Exploitable Fri, 26 Apr 2024 07:23:18 GMT https://vulnogram.org/CVE-2023-6096 https://vulnogram.org/CVE-2023-6096 Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the ma… High Fri, 26 Apr 2024 07:16:12 GMT https://vulnogram.org/CVE-2023-6095 https://vulnogram.org/CVE-2023-6095 Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmwa… High Network Exploitable Fri, 26 Apr 2024 07:09:38 GMT https://vulnogram.org/CVE-2023-5747 https://vulnogram.org/CVE-2023-5747 Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker… High Mon, 13 Nov 2023 07:48:16 GMT https://vulnogram.org/CVE-2023-5037 https://vulnogram.org/CVE-2023-5037 badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw,… High Mon, 13 Nov 2023 07:42:00 GMT