CVE-2024-54013

Katalog CVE

CVSS 8.8 · High EPSS 0,19%

Kerentanan Missing Authentication for Critical Function pada hanwhavision knb-2000 firmware, hanwhavision knb-5000n firmware +58 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

Rincian

Terbit di NVD

28 April 2026

Terakhir diubah

27 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 253 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.hanwhavision.com/wp-content/uploads/2026/04/Camera-Vulnerability-ReportCVE-2024-5401154013.pdf advisory vendor