What’s Vulnerable › Vulnerabilities

CVE-2023-31994

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-23 · updated 2026-06-17

Description

Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.

Affected products

• Hanwhavision Ane-L6012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ane-L7012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L6012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L6022R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L6082R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L7012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L7022R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Ano-L7082R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Anv-L6012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Anv-L6023R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Anv-L6082R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Anv-L7012R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Anv-L7082R Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Arn-1610S Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Arn-410S Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Arn-810S Firmware: before 1.41.03 — fixed in 1.41.03
• Hanwhavision Lnd-6010R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6011R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6012R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6020R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6021R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6022R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6030R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6031R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6032R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6070R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6071R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lnd-6072R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lno-6010R Firmware: before 1.41.12 — fixed in 1.41.12
• Hanwhavision Lno-6011R Firmware: before 1.41.12 — fixed in 1.41.12

How to fix

Upgrade to a fixed version: Hanwhavision Ane-L6012R Firmware 1.41.03; Hanwhavision Ane-L7012R Firmware 1.41.03; Hanwhavision Ano-L6012R Firmware 1.41.03; Hanwhavision Ano-L6022R Firmware 1.41.03; Hanwhavision Ano-L6082R Firmware 1.41.03; Hanwhavision Ano-L7012R Firmware 1.41.03; Hanwhavision Ano-L7022R Firmware 1.41.03; Hanwhavision Ano-L7082R Firmware 1.41.03; Hanwhavision Anv-L6012R Firmware 1.41.03; Hanwhavision Anv-L6023R Firmware 1.41.03; Hanwhavision Anv-L6082R Firmware 1.41.03; Hanwhavision Anv-L7012R Firmware 1.41.03. Check the vendor advisory for mitigations.

References

• https://hanwhavisionamerica.com/download/50042/
• https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf
• https://hanwhavisionamerica.com/download/50042/
• https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf

Get alerted when CVE-2023-31994 or the next vulnerability affects your stack