Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

Hanwha Vision Cameras Missing Authentication for Critical Function (CVE-2024-54013)

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the...

CVE-2026-17612

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information...

EUVD-2026-49400

Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information...

CVE-2026-17612

The CVE-2026-17612 affects Honeywell S35 Series cameras (3M/5M/8M/PinHole) with firmware versions up to HC5.26.1.14.20260207. The vulnerability enables an unauthenticated attacker to access audit logs, potentially exposing sensitive information. Attack vector is NETWORK with low attack complexity...

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

EUVD-2024-55694

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58330

CVE-2024-58330 affects Bosch IP cameras families CPP13 and CPP14 due to a missing authentication check in the access path that guards video analytics event data. The vulnerability enables an unauthenticated attacker to retrieve video analytics event data remotely over the network, with a CVSS v3....

CVE-2026-61392

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory...

CVE-2026-61390

There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets...

CVE-2026-61391

There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets...

CVE-2026-57599

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH...

CVE-2026-57600

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data...

EUVD-2026-47628

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory...

CVE-2026-61392

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory...

CVE-2026-61392

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory...

CVE-2026-61392

Technical details about CVE-2026-61392 are not publicly available in the provided documents; monitor for updates.

CVE-2026-61391

A vulnerability (CVE-2026-61391) affects some Hikvision cameras. It is a stack-based buffer overflow that may allow an authenticated attacker to cause device malfunction by sending specially crafted packets. CVSS 3.1 metrics assign a base score of 7.2 (HIGH) with NETWORK attack vector, LOW attack...

CVE-2026-61391

There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets...

CVE-2026-61391

There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets...