Skip to content
Fencer Vulns
high 7.5

CVE-2023-5038 json

Unauthenticated DoS

published 2024-06-25 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-57383

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Patch / fix

  • hanwhavision ano-l6012r 1.41.16
  • hanwhavision ano-l6022r 1.41.16
  • hanwhavision anv-l6012r 1.41.16
  • hanwhavision ano-l6082r 1.41.16
  • hanwhavision ane-l6012r 1.41.16
  • hanwhavision anv-l6082r 1.41.16
  • hanwhavision ano-l7082r 1.41.16
  • hanwhavision ane-l7012r 1.41.16
  • hanwhavision anv-l7082r 1.41.16
  • hanwhavision ano-l7012r 1.41.16
  • hanwhavision ano-l7022r 1.41.16
  • hanwhavision anv-l7012r 1.41.16
  • hanwhavision pnm-c9022rv 2.22.02
  • hanwhavision pnm-9000qb 2.22.01
  • hanwhavision pnm-7002vd 2.22.02
  • hanwhavision pnm-8082vt 2.22.00
  • hanwhavision pnm-9002vq 2.22.02
  • hanwhavision pnm-9022v 2.22.00
  • hanwhavision pnm-9031rv 2.22.01
  • hanwhavision pnm-9084qz 2.22.02
  • hanwhavision pnm-9084rqz 2.22.02
  • hanwhavision pnm-9085rqz 2.22.02
  • hanwhavision pnm-9084qz1 2.22.02
  • hanwhavision pnm-9084rqz1 2.22.02
  • hanwhavision pnm-9085rqz1 2.22.02
  • hanwhavision pnm-9322vqp 2.22.02
  • hanwhavision pnm-7082rvd 2.22.02
  • hanwhavision pnm-12082rvd 2.22.02
  • hanwhavision lno-6072r 1.41.13
  • hanwhavision lnd-6012r 1.41.13

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CNA 4.0 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera
  • hanwhavision ano-l6012r
  • hanwhavision ano-l6022r
  • hanwhavision anv-l6012r
  • hanwhavision ano-l6082r
  • hanwhavision ane-l6012r
  • hanwhavision anv-l6082r
  • hanwhavision ano-l7082r
  • hanwhavision ane-l7012r
  • hanwhavision anv-l7082r
  • hanwhavision ano-l7012r
  • hanwhavision ano-l7022r
  • hanwhavision anv-l7012r
  • hanwhavision pnm-c9022rv
  • hanwhavision pnm-9000qb
  • hanwhavision pnm-7002vd
  • hanwhavision pnm-8082vt
  • hanwhavision pnm-9002vq
  • hanwhavision pnm-9022v
  • hanwhavision pnm-9031rv
  • hanwhavision pnm-9084qz
  • hanwhavision pnm-9084rqz
  • hanwhavision pnm-9085rqz
  • hanwhavision pnm-9084qz1
  • hanwhavision pnm-9084rqz1
  • hanwhavision pnm-9085rqz1
  • hanwhavision pnm-9322vqp
  • hanwhavision pnm-7082rvd
  • hanwhavision pnm-12082rvd
  • hanwhavision lno-6072r
  • hanwhavision lnd-6012r
  • hanwhavision lno-6032r
  • hanwhavision lnv-6032r
  • hanwhavision lnd-6022r
  • hanwhavision lnd-6072r
  • hanwhavision lno-6022r
  • hanwhavision lnv-6012r
  • hanwhavision lnv-6072r
  • hanwhavision lnd-6032r
  • hanwhavision lnv-6022r
  • hanwhavision lno-6012r
  • hanwhavision qnd-6011
  • hanwhavision qnd-6012r
  • hanwhavision qnd-6021
  • hanwhavision qnd-6022r
  • hanwhavision qnd-6032r

Classification

Weakness
  • CWE-703 Improper Check or Handling of Exceptional Conditions
  • CWE-248 Uncaught Exception

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.