What’s Vulnerable › Vulnerabilities

CVE-2023-5038: Unauthenticated DoS

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-25 · updated 2026-06-17
• Weakness: CWE-248

Description

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

• Hanwhavision Ane-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ane-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6022R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L6082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7022R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Ano-L7082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6023R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L6082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L7012R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Anv-L7082R Firmware: before 1.41.16 — fixed in 1.41.16
• Hanwhavision Lnd-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnd-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lno-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6012R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6022R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6032R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Lnv-6072R Firmware: before 1.41.13 — fixed in 1.41.13
• Hanwhavision Pnm-12082Rvd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-7002Vd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-7082Rvd Firmware: before 2.22.02 — fixed in 2.22.02
• Hanwhavision Pnm-8082Vt Firmware: before 2.22.00 — fixed in 2.22.00
• Hanwhavision Pnm-9000Qb Firmware: before 2.22.01 — fixed in 2.22.01

How to fix

Upgrade to a fixed version: Hanwhavision Ane-L6012R Firmware 1.41.16; Hanwhavision Ane-L7012R Firmware 1.41.16; Hanwhavision Ano-L6012R Firmware 1.41.16; Hanwhavision Ano-L6022R Firmware 1.41.16; Hanwhavision Ano-L6082R Firmware 1.41.16; Hanwhavision Ano-L7012R Firmware 1.41.16; Hanwhavision Ano-L7022R Firmware 1.41.16; Hanwhavision Ano-L7082R Firmware 1.41.16; Hanwhavision Anv-L6012R Firmware 1.41.16; Hanwhavision Anv-L6023R Firmware 1.41.16; Hanwhavision Anv-L6082R Firmware 1.41.16; Hanwhavision Anv-L7012R Firmware 1.41.16. Check the vendor advisory for mitigations.

References

• https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf
• https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf

Get alerted when CVE-2023-5038 or the next vulnerability affects your stack