CVE-2023-5037

HIGH EPSS 71.3%
Published Nov 13, 20232y ago · Modified Jun 17, 20262w ago
7.1 CVSS 4.0
High
Find Similar
Published Nov 13, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

CVSS Details

Base Score
7.1
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
71.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 366

VendorProductVersionRange
hanwhavisionano-l6012r_firmware* <1.41.16
hanwhavisionano-l6012r*any
hanwhavisionano-l6022r_firmware* <1.41.16
hanwhavisionano-l6022r*any
hanwhavisionanv-l6012r_firmware* <1.41.16
hanwhavisionanv-l6012r*any
hanwhavisionano-l6082r_firmware* <1.41.16
hanwhavisionano-l6082r*any
hanwhavisionane-l6012r_firmware* <1.41.16
hanwhavisionane-l6012r*any
hanwhavisionanv-l6082r_firmware* <1.41.16
hanwhavisionanv-l6082r*any
hanwhavisionano-l7082r_firmware* <1.41.16
hanwhavisionano-l7082r*any
hanwhavisionane-l7012r_firmware* <1.41.16
hanwhavisionane-l7012r*any
hanwhavisionanv-l7082r_firmware* <1.41.16
hanwhavisionanv-l7082r*any
hanwhavisionano-l7012r_firmware* <1.41.16
hanwhavisionano-l7012r*any
hanwhavisionano-l7022r_firmware* <1.41.16
hanwhavisionano-l7022r*any
hanwhavisionanv-l7012r_firmware* <1.41.16
hanwhavisionanv-l7012r*any
hanwhavisionpnm-c9022rv_firmware* <2.22.02
hanwhavisionpnm-c9022rv*any
hanwhavisionpnm-9000qb_firmware* <2.22.01
hanwhavisionpnm-9000qb*any
hanwhavisionpnm-7002vd_firmware* <2.22.02
hanwhavisionpnm-7002vd*any
hanwhavisionpnm-8082vt_firmware* <2.22.00
hanwhavisionpnm-8082vt*any
hanwhavisionpnm-9002vq_firmware* <2.22.02
hanwhavisionpnm-9002vq*any
hanwhavisionpnm-9022v_firmware* <2.22.00
hanwhavisionpnm-9022v*any
hanwhavisionpnm-9031rv_firmware* <2.22.01
hanwhavisionpnm-9031rv*any
hanwhavisionpnm-9084qz_firmware* <2.22.02
hanwhavisionpnm-9084qz*any
hanwhavisionpnm-9084rqz_firmware* <2.22.02
hanwhavisionpnm-9084rqz*any
hanwhavisionpnm-9085rqz_firmware* <2.22.02
hanwhavisionpnm-9085rqz*any
hanwhavisionpnm-9084qz1_firmware* <2.22.02
hanwhavisionpnm-9084qz1*any
hanwhavisionpnm-9084rqz1_firmware* <2.22.02
hanwhavisionpnm-9084rqz1*any
hanwhavisionpnm-9085rqz1_firmware* <2.22.02
hanwhavisionpnm-9085rqz1*any
hanwhavisionpnm-9322vqp_firmware* <2.22.02
hanwhavisionpnm-9322vqp*any
hanwhavisionpnm-7082rvd_firmware* <2.22.02
hanwhavisionpnm-7082rvd*any
hanwhavisionpnm-12082rvd_firmware* <2.22.02
hanwhavisionpnm-12082rvd*any
hanwhavisionlno-6072r_firmware* <1.41.13
hanwhavisionlno-6072r*any
hanwhavisionlnd-6012r_firmware* <1.41.13
hanwhavisionlnd-6012r*any
hanwhavisionlno-6032r_firmware* <1.41.13
hanwhavisionlno-6032r*any
hanwhavisionlnv-6032r_firmware* <1.41.13
hanwhavisionlnv-6032r*any
hanwhavisionlnd-6022r_firmware* <1.41.13
hanwhavisionlnd-6022r*any
hanwhavisionlnd-6072r_firmware* <1.41.13
hanwhavisionlnd-6072r*any
hanwhavisionlno-6022r_firmware* <1.41.13
hanwhavisionlno-6022r*any
hanwhavisionlnv-6012r_firmware* <1.41.13
hanwhavisionlnv-6012r*any
hanwhavisionlnv-6072r_firmware* <1.41.13
hanwhavisionlnv-6072r*any
hanwhavisionlnd-6032r_firmware* <1.41.13
hanwhavisionlnd-6032r*any
hanwhavisionlnv-6022r_firmware* <1.41.13
hanwhavisionlnv-6022r*any
hanwhavisionlno-6012r_firmware* <1.41.13
hanwhavisionlno-6012r*any
hanwhavisionqnd-6011_firmware* <1.41.16
hanwhavisionqnd-6011*any
hanwhavisionqnd-6012r_firmware* <1.41.16
hanwhavisionqnd-6012r*any
hanwhavisionqnd-6021_firmware* <1.41.16
hanwhavisionqnd-6021*any
hanwhavisionqnd-6022r_firmware* <1.41.16
hanwhavisionqnd-6022r*any
hanwhavisionqnd-6032r_firmware* <1.41.16
hanwhavisionqnd-6032r*any
hanwhavisionqnd-6072r_firmware* <1.41.16
hanwhavisionqnd-6072r*any
hanwhavisionqnd-6073r_firmware* <1.41.16
hanwhavisionqnd-6073r*any
hanwhavisionqnd-6082r_firmware* <1.41.16
hanwhavisionqnd-6082r*any
hanwhavisionqnd-6083r_firmware* <1.41.16
hanwhavisionqnd-6083r*any
hanwhavisionqno-6012r_firmware* <1.41.16
hanwhavisionqno-6012r*any
hanwhavisionqno-6022r_firmware* <1.41.16
hanwhavisionqno-6022r*any
hanwhavisionqno-6032r_firmware* <1.41.16
hanwhavisionqno-6032r*any
hanwhavisionqno-6072r_firmware* <1.41.16
hanwhavisionqno-6072r*any
hanwhavisionqno-6073r_firmware* <1.41.16
hanwhavisionqno-6073r*any
hanwhavisionqno-6082r_firmware* <1.41.16
hanwhavisionqno-6082r*any
hanwhavisionqno-6083r_firmware* <1.41.16
hanwhavisionqno-6083r*any
hanwhavisionqnv-6012r_firmware* <1.41.16
hanwhavisionqnv-6012r*any
hanwhavisionqnv-6022r_firmware* <1.41.16
hanwhavisionqnv-6022r*any
hanwhavisionqnv-6032r_firmware* <1.41.16
hanwhavisionqnv-6032r*any
hanwhavisionqnv-6072r_firmware* <1.41.16
hanwhavisionqnv-6072r*any
hanwhavisionqnv-6073r_firmware* <1.41.16
hanwhavisionqnv-6073r*any
hanwhavisionqnv-6082r_firmware* <1.41.16
hanwhavisionqnv-6082r*any
hanwhavisionqnv-6083r_firmware* <1.41.16
hanwhavisionqnv-6083r*any
hanwhavisionqnd-6012r1_firmware* <1.41.16
hanwhavisionqnd-6012r1*any
hanwhavisionqnd-6022r1_firmware* <1.41.16
hanwhavisionqnd-6022r1*any
hanwhavisionqnd-6032r1_firmware* <1.41.16
hanwhavisionqnd-6032r1*any
hanwhavisionqnd-6072r1_firmware* <1.41.16
hanwhavisionqnd-6072r1*any
hanwhavisionqnd-6082r1_firmware* <1.41.16
hanwhavisionqnd-6082r1*any
hanwhavisionqnv-6012r1_firmware* <1.41.16
hanwhavisionqnv-6012r1*any
hanwhavisionqnv-6022r1_firmware* <1.41.16
hanwhavisionqnv-6022r1*any
hanwhavisionqnv-6032r1_firmware* <1.41.16
hanwhavisionqnv-6032r1*any
hanwhavisionqnv-6072r1_firmware* <1.41.16
hanwhavisionqnv-6072r1*any
hanwhavisionqnv-6082r1_firmware* <1.41.16
hanwhavisionqnv-6082r1*any
hanwhavisionqno-6012r1_firmware* <1.41.16
hanwhavisionqno-6012r1*any
hanwhavisionqno-6022r1_firmware* <1.41.16
hanwhavisionqno-6022r1*any
hanwhavisionqno-6032r1_firmware* <1.41.16
hanwhavisionqno-6032r1*any
hanwhavisionqno-6072r1_firmware* <1.41.16
hanwhavisionqno-6072r1*any
hanwhavisionqno-6082r1_firmware* <1.41.16
hanwhavisionqno-6082r1*any
hanwhavisionqnd-7082r_firmware* <1.41.16
hanwhavisionqnd-7082r*any
hanwhavisionqnv-7082r_firmware* <1.41.16
hanwhavisionqnv-7082r*any
hanwhavisionqno-7082r_firmware* <1.41.16
hanwhavisionqno-7082r*any
hanwhavisionqnd-7012r_firmware* <1.41.16
hanwhavisionqnd-7012r*any
hanwhavisionqnd-7022r_firmware* <1.41.16
hanwhavisionqnd-7022r*any
hanwhavisionqnd-7032r_firmware* <1.41.16
hanwhavisionqnd-7032r*any
hanwhavisionqno-7012r_firmware* <1.41.16
hanwhavisionqno-7012r*any
hanwhavisionqno-7022r_firmware* <1.41.16
hanwhavisionqno-7022r*any
hanwhavisionqno-7032r_firmware* <1.41.16
hanwhavisionqno-7032r*any
hanwhavisionqnv-7012r_firmware* <1.41.16
hanwhavisionqnv-7012r*any
hanwhavisionqnv-7022r_firmware* <1.41.16
hanwhavisionqnv-7022r*any
hanwhavisionqnv-7032r_firmware* <1.41.16
hanwhavisionqnv-7032r*any
hanwhavisionqnv-6014r_firmware* <1.41.16
hanwhavisionqnv-6014r*any
hanwhavisionqnv-6084r_firmware* <1.41.16
hanwhavisionqnv-6084r*any
hanwhavisionqno-6014r_firmware* <1.41.16
hanwhavisionqno-6014r*any
hanwhavisionqno-6084r_firmware* <1.41.16
hanwhavisionqno-6084r*any
hanwhavisionqnv-6024rm_firmware* <1.41.16
hanwhavisionqnv-6024rm*any
hanwhavisionqnv-6023r_firmware* <1.41.16
hanwhavisionqnv-6023r*any
hanwhavisionanv-l6023r_firmware* <1.41.16
hanwhavisionanv-l6023r*any
hanwhavisionqnb-8002_firmware* <1.41.17
hanwhavisionqnb-8002*any
hanwhavisionqnd-8010r_firmware* <1.42.01
hanwhavisionqnd-8010r*any
hanwhavisionqnd-8011_firmware* <1.42.01
hanwhavisionqnd-8011*any
hanwhavisionqnd-8020r_firmware* <1.42.01
hanwhavisionqnd-8020r*any
hanwhavisionqnd-8021_firmware* <1.42.01
hanwhavisionqnd-8021*any
hanwhavisionqnd-8030r_firmware* <1.42.01
hanwhavisionqnd-8030r*any
hanwhavisionqnd-8080r_firmware* <1.42.01
hanwhavisionqnd-8080r*any
hanwhavisionqne-8011r_firmware* <1.42.01
hanwhavisionqne-8011r*any
hanwhavisionqne-8021r_firmware* <1.42.01
hanwhavisionqne-8021r*any
hanwhavisionqno-8010r_firmware* <1.42.01
hanwhavisionqno-8010r*any
hanwhavisionqno-8020r_firmware* <1.42.01
hanwhavisionqno-8020r*any
hanwhavisionqno-8030r_firmware* <1.42.01
hanwhavisionqno-8030r*any
hanwhavisionqno-8080r_firmware* <1.42.01
hanwhavisionqno-8080r*any
hanwhavisionqnv-8010r_firmware* <1.42.01
hanwhavisionqnv-8010r*any
hanwhavisionqnv-8020r_firmware* <1.42.01
hanwhavisionqnv-8020r*any
hanwhavisionqnv-8030r_firmware* <1.42.01
hanwhavisionqnv-8030r*any
hanwhavisionqnv-8080r_firmware* <1.42.01
hanwhavisionqnv-8080r*any
hanwhavisionxnv-9083rz_firmware* <2.23.00
hanwhavisionxnv-9083rz*any
hanwhavisionxnv-8083rz_firmware* <2.23.00
hanwhavisionxnv-8083rz*any
hanwhavisionxnv-8083z_firmware* <2.23.00
hanwhavisionxnv-8083z*any
hanwhavisionxnv-6083rz_firmware* <2.23.00
hanwhavisionxnv-6083rz*any
hanwhavisionxnv-6083z_firmware* <2.23.00
hanwhavisionxnv-6083z*any
hanwhavisionxnb-6002_firmware* <2.23.00
hanwhavisionxnb-6002*any
hanwhavisionxnd-6083rv_firmware* <2.23.00
hanwhavisionxnd-6083rv*any
hanwhavisionxnv-6083r_firmware* <2.23.00
hanwhavisionxnv-6083r*any
hanwhavisionxno-6083r_firmware* <2.23.00
hanwhavisionxno-6083r*any
hanwhavisionxnb-6003_firmware* <2.23.00
hanwhavisionxnb-6003*any
hanwhavisionxnv-9083r_firmware* <2.23.00
hanwhavisionxnv-9083r*any
hanwhavisionxnv-8093r_firmware* <2.23.00
hanwhavisionxnv-8093r*any
hanwhavisionxnv-8083r_firmware* <2.23.00
hanwhavisionxnv-8083r*any
hanwhavisionxnd-9083rv_firmware* <2.23.00
hanwhavisionxnd-9083rv*any
hanwhavisionxnd-8093rv_firmware* <2.23.00
hanwhavisionxnd-8093rv*any
hanwhavisionxnd-8083rv_firmware* <2.23.00
hanwhavisionxnd-8083rv*any
hanwhavisionxno-9083r_firmware* <2.23.00
hanwhavisionxno-9083r*any
hanwhavisionxno-8083r_firmware* <2.23.00
hanwhavisionxno-8083r*any
hanwhavisionxnb-9003_firmware* <2.23.00
hanwhavisionxnb-9003*any
hanwhavisionxnb-8003_firmware* <2.23.00
hanwhavisionxnb-8003*any
hanwhavisionxnd-c6083rv_firmware* <2.23.00
hanwhavisionxnd-c6083rv*any
hanwhavisionxnd-c7083rv_firmware* <2.23.00
hanwhavisionxnd-c7083rv*any
hanwhavisionxnv-c6083r_firmware* <2.23.00
hanwhavisionxnv-c6083r*any
hanwhavisionxnv-c7083r_firmware* <2.23.00
hanwhavisionxnv-c7083r*any
hanwhavisionxno-c6083r_firmware* <2.23.00
hanwhavisionxno-c6083r*any
hanwhavisionxno-c7083r_firmware* <2.23.00
hanwhavisionxno-c7083r*any
hanwhavisionxnv-c6083_firmware* <2.23.00
hanwhavisionxnv-c6083*any
hanwhavisionxnd-c8083rv_firmware* <2.23.00
hanwhavisionxnd-c8083rv*any
hanwhavisionxnd-c9083rv_firmware* <2.23.00
hanwhavisionxnd-c9083rv*any
hanwhavisionxnv-c8083r_firmware* <2.23.00
hanwhavisionxnv-c8083r*any
hanwhavisionxnv-c9083r_firmware* <2.23.00
hanwhavisionxnv-c9083r*any
hanwhavisionxno-c8083r_firmware* <2.23.00
hanwhavisionxno-c8083r*any
hanwhavisionxno-c9083r_firmware* <2.23.00
hanwhavisionxno-c9083r*any
hanwhavisionxnp-9250r_firmware* <2.23.00
hanwhavisionxnp-9250r*any
hanwhavisionxnp-8250r_firmware* <2.23.00
hanwhavisionxnp-8250r*any
hanwhavisionxnp-9250_firmware* <2.23.00
hanwhavisionxnp-9250*any
hanwhavisionxnp-8250_firmware* <2.23.00
hanwhavisionxnp-8250*any
hanwhavisionxnp-6400r_firmware* <2.23.00
hanwhavisionxnp-6400r*any
hanwhavisionxnp-6400_firmware* <2.23.00
hanwhavisionxnp-6400*any
hanwhavisionxnp-9300rw_firmware* <2.23.00
hanwhavisionxnp-9300rw*any
hanwhavisionxnp-8300rw_firmware* <2.23.00
hanwhavisionxnp-8300rw*any
hanwhavisionxnp-6400rw_firmware* <2.23.00
hanwhavisionxnp-6400rw*any
hanwhavisiontnv-c7013rc_firmware* <2.23.00
hanwhavisiontnv-c7013rc*any
hanwhavisionxnp-c6403_firmware* <2.23.00
hanwhavisionxnp-c6403*any
hanwhavisionxnp-c6403r_firmware* <2.23.00
hanwhavisionxnp-c6403r*any
hanwhavisionxnp-c6403rw_firmware* <2.23.00
hanwhavisionxnp-c6403rw*any
hanwhavisionxnp-c8253_firmware* <2.23.00
hanwhavisionxnp-c8253*any
hanwhavisionxnp-c8253r_firmware* <2.23.00
hanwhavisionxnp-c8253r*any
hanwhavisionxnp-c8303rw_firmware* <2.23.00
hanwhavisionxnp-c8303rw*any
hanwhavisionxnp-c9253_firmware* <2.23.00
hanwhavisionxnp-c9253*any
hanwhavisionxnp-c9253r_firmware* <2.23.00
hanwhavisionxnp-c9253r*any
hanwhavisionxnp-c9303rw_firmware* <2.23.00
hanwhavisionxnp-c9303rw*any
hanwhavisionxno-6123r_firmware* <2.23.00
hanwhavisionxno-6123r*any
hanwhavisionxnv-6123r_firmware* <2.23.00
hanwhavisionxnv-6123r*any
hanwhavisionxnb-8002_firmware* <2.23.00
hanwhavisionxnb-8002*any
hanwhavisionxnb-9002_firmware* <2.23.00
hanwhavisionxnb-9002*any
hanwhavisionxnd-8082rf_firmware* <2.23.00
hanwhavisionxnd-8082rf*any
hanwhavisionxnd-8082rv_firmware* <2.23.00
hanwhavisionxnd-8082rv*any
hanwhavisionxnd-9082rf_firmware* <2.23.00
hanwhavisionxnd-9082rf*any
hanwhavisionxnd-9082rv_firmware* <2.23.00
hanwhavisionxnd-9082rv*any
hanwhavisionxno-8082r_firmware* <2.23.00
hanwhavisionxno-8082r*any
hanwhavisionxno-9082r_firmware* <2.23.00
hanwhavisionxno-9082r*any
hanwhavisionxnv-8082r_firmware* <2.23.00
hanwhavisionxnv-8082r*any
hanwhavisionxnv-9082r_firmware* <2.23.00
hanwhavisionxnv-9082r*any
hanwhavisionxnp-c9310r_firmware* <2.23.00
hanwhavisionxnp-c9310r*any
hanwhavisionxnf-9010rv_firmware* <2.23.00
hanwhavisionxnf-9010rv*any
hanwhavisionxnf-9010rvm_firmware* <2.23.00
hanwhavisionxnf-9010rvm*any
hanwhavisionxnf-9010rs_firmware* <2.23.00
hanwhavisionxnf-9010rs*any
hanwhavisionxnf-9013rv_firmware* <2.23.00
hanwhavisionxnf-9013rv*any

References 1

  • hanwhavision.com https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.