CVEvulnerability

CVE-2024-54013

8.7 HIGH Published 2026-04-28 Modified 2026-06-27 Official page ↗
Status
Analyzed
Published
2026-04-28
Last modified
2026-06-27
Assigner
fc9afe74-3f80-4fb7-a313-e6f036a89882
CVSS 4.0 (fc9afe74-3f80-4fb7-a313-e6f036a89882)
8.7 HIGH — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

Affected configurations

• hanwhavision knb-2000 firmware (< 2.23.01) • hanwhavision knb-5000n firmware (< 2.23.01) • hanwhavision knd-2010 firmware (< 2.23.01) • hanwhavision knd-2020rn firmware (< 2.23.01) • hanwhavision knd-2080rn firmware (< 2.23.01) • hanwhavision xnv-l6080 firmware (< 2.23.01) • hanwhavision xnv-l6080a firmware (< 2.23.01) • hanwhavision xnv-l6080r firmware (< 2.23.01) • hanwhavision xnv-l6080ra firmware (< 2.23.01) • hanwhavision xnz-6320 firmware (< 2.10.04) • hanwhavision xnz-6320a firmware (< 2.23.01) • hanwhavision xnz-l6320 firmware (< 2.10.04) • hanwhavision xnz-l6320a firmware (< 2.23.01) • hanwhavision knd-5020rn firmware (< 2.23.01) • hanwhavision knd-5080rn firmware (< 2.23.01) • hanwhavision kno-2010rn firmware (< 2.23.01) • hanwhavision kno-2080rn firmware (< 2.23.01) • hanwhavision kno-2120rn firmware (< 2.23.01) • hanwhavision kno-5020rn firmware (< 2.23.01) • hanwhavision kno-5080rn firmware (< 2.23.01) • hanwhavision knp-2120hn firmware (< 2.23.01) • hanwhavision knp-2320rh firmware (< 2.23.01) • hanwhavision knp-2320rha firmware (< 2.23.01) • hanwhavision knp-2550rha firmware (< 2.23.01) • hanwhavision pnd-a6081rv firmware (< 2.23.01) • hanwhavision pnd-a9081rv firmware (< 2.23.01) • hanwhavision pnm-7000vd firmware (< 2.23.00) • hanwhavision pnm-7002vd firmware (< 2.23.00) • hanwhavision pnm-9000vd firmware (< 2.23.00) • hanwhavision pnm-9000vq firmware (< 2.23.00) • hanwhavision pnm-9002vq firmware (< 2.23.00) • hanwhavision pnm-9080vq firmware (< 2.23.00) • hanwhavision pnm-9081vq firmware (< 2.23.00) • hanwhavision pnm-9084qz firmware (< 2.23.00) • hanwhavision pnm-9084qz1 firmware (< 2.23.00) • hanwhavision pnm-9084rqz firmware (< 2.23.00) • hanwhavision pnm-9084rqzt firmware (< 2.23.00) • hanwhavision pnm-9085rqz firmware (< 2.23.00) • hanwhavision pnm-9085rqzt firmware (< 2.23.00) • hanwhavision pnm-9320vqp firmware (< 2.23.00) • hanwhavision pnm-9321vqp firmware (< 2.23.00) • hanwhavision pnm-9322vqp firmware (< 2.23.00) • hanwhavision pnv-a6081r firmware (< 2.23.01) • hanwhavision pnv-a9081r firmware (< 2.23.01) • hanwhavision qnd-c8013r firmware (< 2.22.10) • hanwhavision qnd-c8023r firmware (< 2.22.10) • hanwhavision qne-c8013rl firmware (< 2.22.10) • hanwhavision qne-c9013rl firmware (< 2.22.10) • hanwhavision qnf-8010 firmware (< 2.10.03) • hanwhavision qnf-c9010 firmware (< 2.22.10) • hanwhavision qnf-c9010v firmware (< 2.22.10) • hanwhavision qno-c6083r firmware (< 2.22.10) • hanwhavision qno-c8013r firmware (< 2.22.10) • hanwhavision xnd-6080rv firmware (< 2.23.01) • hanwhavision xnd-6080rw firmware (< 2.23.01) • hanwhavision xnd-6080v firmware (< 2.23.01) • hanwhavision xnd-6081f firmware (< 2.23.01) • hanwhavision xnd-6081fz firmware (< 2.23.01) • hanwhavision xnd-6081rev firmware (< 2.10.04) • hanwhavision xnd-6081rf firmware (< 2.23.01) … and 193 more

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References