Description (CNA)
An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lorex / 2K Indoor Wi-Fi Security Camera | affected 0 before 2.800.0000000.8.R.20241111 |
CWE
CWE-345
References
- https://github.com/sfewer-r7/LorexExploit
- https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/
ADP enrichment
No English description supplied.
No references supplied.