high7.5
CVE-2023-5038
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera.
Impact
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hanwhavision | Ano-L6012r Firmware | before 1.41.16 |
| Hanwhavision | Ano-L6022r Firmware | before 1.41.16 |
| Hanwhavision | Anv-L6012r Firmware | before 1.41.16 |
| Hanwhavision | Ano-L6082r Firmware | before 1.41.16 |
| Hanwhavision | Ane-L6012r Firmware | before 1.41.16 |
| Hanwhavision | Anv-L6082r Firmware | before 1.41.16 |
| Hanwhavision | Ano-L7082r Firmware | before 1.41.16 |
| Hanwhavision | Ane-L7012r Firmware | before 1.41.16 |
| Hanwhavision | Anv-L7082r Firmware | before 1.41.16 |
| Hanwhavision | Ano-L7012r Firmware | before 1.41.16 |
| Hanwhavision | Ano-L7022r Firmware | before 1.41.16 |
| Hanwhavision | Anv-L7012r Firmware | before 1.41.16 |