CVE-2024-54013
גבוהה 8.8
תיאור (מקור, אנגלית)
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
8.7 (HIGH)
מקור הציון: CNA
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-27/9/2026
- CWE
- CWE-306
מוצרים מושפעים
hanwhavision: knb-2000 firmware; hanwhavision: knb-2000; hanwhavision: knb-5000n firmware; hanwhavision: knb-5000n; hanwhavision: knd-2010 firmware; hanwhavision: knd-2010; hanwhavision: knd-2020rn firmware; hanwhavision: knd-2020rn; hanwhavision: knd-2080rn firmware; hanwhavision: knd-2080rn; hanwhavision: xnv-l6080 firmware; hanwhavision: xnv-l6080; hanwhavision: xnv-l6080a firmware; hanwhavision: xnv-l6080a; hanwhavision: xnv-l6080r firmware