What is CVE-2024-54012?

CVE-2024-54012 is a medium-severity vulnerability in Hanwha Vision Qnd-8080r, classified under OS Command Injection. CVSS score: 5.3/10. Published 2026-04-28.

How severe is CVE-2024-54012?

Medium severity. CVSS v3 base score is 5.3 out of 10.

RCE in Hanwha Vision Qnd-8080r

CVE-2024-54012

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.003 (17.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Hanwha Vision Qnd-8080r — versions 0
Hanwhavision Knb-2000
Hanwhavision Knb-2000_firmware
Hanwhavision Knb-5000n
Hanwhavision Knb-5000n_firmware
Hanwhavision Knd-2010
Hanwhavision Knd-2010_firmware
Hanwhavision Knd-2020rn
Hanwhavision Knd-2020rn_firmware
Hanwhavision Knd-2080rn

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

fc9afe74-3f80-4fb7-a313-e6f036a89882 (Vendor Advisory)

Frequently asked questions

What is CVE-2024-54012?: CVE-2024-54012 is a medium-severity vulnerability in Hanwha Vision Qnd-8080r, classified under OS Command Injection. CVSS score: 5.3/10. Published 2026-04-28.
How severe is CVE-2024-54012?: Medium severity. CVSS v3 base score is 5.3 out of 10.