NetSight
IP …
high8.8

CVE-2023-31996

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.

Impact

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.

Affected products

VendorProductAffected versions
HanwhavisionAne-L6012r Firmware
before 1.41.03
HanwhavisionAne-L7012r Firmware
before 1.41.03
HanwhavisionAno-L6012r Firmware
before 1.41.03
HanwhavisionAno-L6022r Firmware
before 1.41.03
HanwhavisionAno-L6082r Firmware
before 1.41.03
HanwhavisionAno-L7012r Firmware
before 1.41.03
HanwhavisionAno-L7022r Firmware
before 1.41.03
HanwhavisionAno-L7082r Firmware
before 1.41.03
HanwhavisionAnv-L6012r Firmware
before 1.41.03
HanwhavisionAnv-L6023r Firmware
before 1.41.03
HanwhavisionAnv-L6082r Firmware
before 1.41.03
HanwhavisionAnv-L7012r Firmware
before 1.41.03

Weakness classification

CWE-77

References