← CVE Intelligence

CVE-2024-54012

Command Injection PUBLISHED

Description (CNA)

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.

Affected (CNA)

Vendor / productVersions
Hanwha Vision / QND-8080Raffected 0 before 2.24.00

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.