Description (CNA)
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hanwha Vision Co., Ltd. / XRN-420S | affected 5.01.62 and prior versions |
CWE
CWE-476
References
ADP enrichment
No English description supplied.
No references supplied.