What’s Vulnerable › Vulnerabilities

CVE-2023-5037: Authenticated Command Injection

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-13 · updated 2026-06-17
• Weakness: CWE-78

Description

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

• Hanwhavision Ane-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ane-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6022R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7022R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6023R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L7082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Lnd-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Pnm-12082Rvd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-7002Vd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-7082Rvd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-8082Vt Firmware: before 2.22.00 — fixed in 2.22.00
• Hanwhavision Pnm-9000Qb Firmware: before 2.22.01 — fixed in 2.22.01

How to fix

Upgrade to a fixed version: Hanwhavision Ane-L6012R Firmware 1.41.16; Hanwhavision Ane-L7012R Firmware 1.41.16; Hanwhavision Ano-L6012R Firmware 1.41.16; Hanwhavision Ano-L6022R Firmware 1.41.16; Hanwhavision Ano-L6082R Firmware 1.41.16; Hanwhavision Ano-L7012R Firmware 1.41.16; Hanwhavision Ano-L7022R Firmware 1.41.16; Hanwhavision Ano-L7082R Firmware 1.41.16; Hanwhavision Anv-L6012R Firmware 1.41.16; Hanwhavision Anv-L6023R Firmware 1.41.16; Hanwhavision Anv-L6082R Firmware 1.41.16; Hanwhavision Anv-L7012R Firmware 1.41.16. Check the vendor advisory for mitigations.

References

• https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf
• https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf

Get alerted when CVE-2023-5037 or the next vulnerability affects your stack