Back to search
CVE-2024-41883
Published: Dec 24, 2024
Modified: Dec 24, 2024
PUBLISHED
Description
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
| Vendor | Product | Versions |
|---|---|---|
Hanwha Vision Co., Ltd. | XRN-420S | affected 5.01.62 and prior versions |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now