RCE in Hanwha Vision Qnd-8080r

CVE-2024-54012

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.000 (11.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References