CVE-2024-41883

Publication date

2024-12-24 05:32:41

Family

Hanwha_Vision

State

PUBLISHED

Description

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR . An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturers report for details and workarounds.