CVE-2023-5747

CVSS V2 None CVSS V3 None
Description
Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution."
Overview
  • CVE ID
  • CVE-2023-5747
  • Assigner
  • Hanwha_Vision
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-13T07:48:16.959Z
  • Last Modified Date
  • 2023-11-14T01:14:38.418Z
Weakness Enumerations
CWE URL
CWE-347 http://cwe.mitre.org/data/definitions/347.html
CWE-345 http://cwe.mitre.org/data/definitions/345.html
References
Reference URL Reference Tags
https://www.hanwhavision.com/wp-content/uploads/2023/11/Camera-Vulnerability-Report-CVE-2023-5747_20231113.pdf vendor-advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-5747
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5747
History
Created Old Value New Value Data Type Notes
2024-06-25 05:38:16 Added to TrackCVE