Skip to content
Fencer Vulns
high 7.2

CVE-2023-5037 json

Authenticated Command Injection

published 2023-11-13 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-57382

cvss
7.2
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 74%
public exploits
0
none known

Summary

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Patch / fix

  • hanwhavision ano-l6012r 1.41.16
  • hanwhavision ano-l6022r 1.41.16
  • hanwhavision anv-l6012r 1.41.16
  • hanwhavision ano-l6082r 1.41.16
  • hanwhavision ane-l6012r 1.41.16
  • hanwhavision anv-l6082r 1.41.16
  • hanwhavision ano-l7082r 1.41.16
  • hanwhavision ane-l7012r 1.41.16
  • hanwhavision anv-l7082r 1.41.16
  • hanwhavision ano-l7012r 1.41.16
  • hanwhavision ano-l7022r 1.41.16
  • hanwhavision anv-l7012r 1.41.16
  • hanwhavision pnm-c9022rv 2.22.02
  • hanwhavision pnm-9000qb 2.22.01
  • hanwhavision pnm-7002vd 2.22.02
  • hanwhavision pnm-8082vt 2.22.00
  • hanwhavision pnm-9002vq 2.22.02
  • hanwhavision pnm-9022v 2.22.00
  • hanwhavision pnm-9031rv 2.22.01
  • hanwhavision pnm-9084qz 2.22.02
  • hanwhavision pnm-9084rqz 2.22.02
  • hanwhavision pnm-9085rqz 2.22.02
  • hanwhavision pnm-9084qz1 2.22.02
  • hanwhavision pnm-9084rqz1 2.22.02
  • hanwhavision pnm-9085rqz1 2.22.02
  • hanwhavision pnm-9322vqp 2.22.02
  • hanwhavision pnm-7082rvd 2.22.02
  • hanwhavision pnm-12082rvd 2.22.02
  • hanwhavision lno-6072r 1.41.13
  • hanwhavision lnd-6012r 1.41.13

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

1.51% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
CNA 4.0 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera
  • hanwhavision ano-l6012r
  • hanwhavision ano-l6022r
  • hanwhavision anv-l6012r
  • hanwhavision ano-l6082r
  • hanwhavision ane-l6012r
  • hanwhavision anv-l6082r
  • hanwhavision ano-l7082r
  • hanwhavision ane-l7012r
  • hanwhavision anv-l7082r
  • hanwhavision ano-l7012r
  • hanwhavision ano-l7022r
  • hanwhavision anv-l7012r
  • hanwhavision pnm-c9022rv
  • hanwhavision pnm-9000qb
  • hanwhavision pnm-7002vd
  • hanwhavision pnm-8082vt
  • hanwhavision pnm-9002vq
  • hanwhavision pnm-9022v
  • hanwhavision pnm-9031rv
  • hanwhavision pnm-9084qz
  • hanwhavision pnm-9084rqz
  • hanwhavision pnm-9085rqz
  • hanwhavision pnm-9084qz1
  • hanwhavision pnm-9084rqz1
  • hanwhavision pnm-9085rqz1
  • hanwhavision pnm-9322vqp
  • hanwhavision pnm-7082rvd
  • hanwhavision pnm-12082rvd
  • hanwhavision lno-6072r
  • hanwhavision lnd-6012r
  • hanwhavision lno-6032r
  • hanwhavision lnv-6032r
  • hanwhavision lnd-6022r
  • hanwhavision lnd-6072r
  • hanwhavision lno-6022r
  • hanwhavision lnv-6012r
  • hanwhavision lnv-6072r
  • hanwhavision lnd-6032r
  • hanwhavision lnv-6022r
  • hanwhavision lno-6012r
  • hanwhavision qnd-6011
  • hanwhavision qnd-6012r
  • hanwhavision qnd-6021
  • hanwhavision qnd-6022r
  • hanwhavision qnd-6032r

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.