Loading story…
Hanwha Vision disclosed patched firmware for two high-severity vulnerabilities affecting its camera and web server components after the flaws were identified by Amazon penetration testing engineers. CVE-2024-54013 is an authentication bypass issue classified as CWE-306 that can allow unintended access to protected functions because of a request-handling weakness in a web server component.
The company also addressed CVE-2024-54012, a command injection flaw classified as CWE-78, in which improperly validated input can let specially crafted requests execute malicious commands on affected camera systems. Both CVEs carry CVSS v4.0 ratings indicating high impact to confidentiality, integrity, and availability, and Hanwha Vision directed customers to its advisory for firmware updates, remediation guidance, and available workarounds.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
New CVE records for CVE-2024-54012 and CVE-2024-54013 were published, documenting a command injection vulnerability and an authentication bypass vulnerability respectively. Both entries classify the flaws as high severity and reference Hanwha Vision's remediation guidance.
Hanwha Vision released patched firmware and published a vendor report with remediation details and workarounds for an authentication bypass flaw in a web server component and a command injection flaw in a camera system. The issues were identified by penetration testing engineers at Amazon.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Yi Technology's **YI Home Camera 2** firmware `2.1.1_20171024151200` was found to contain two high-severity vulnerabilities in `home/web/ipc`, including **hard-coded credentials** tracked as `CVE-2026-4475` and **improper cryptographic signature verification** in the HTTP firmware update handler tracked as `CVE-2026-4478`. The hard-coded credentials issue could allow an attacker with local network access to compromise the device, while the firmware update flaw could enable remote abuse of the update mechanism despite higher attack complexity. Both issues were publicly disclosed with reports indicating exploit details are available, increasing the risk of real-world abuse against affected cameras. The vulnerabilities are classified under **CWE-798/CWE-259** for embedded credentials and **CWE-345/CWE-347** for signature verification failures, and the vendor reportedly did not respond after being contacted before disclosure.
Jun 29, 2026
Bitdefender disclosed two serious vulnerabilities in Dahua camera firmware, tracked as **CVE-2025-31700** and **CVE-2025-31701**, that can be exploited by an unauthenticated attacker to achieve remote code execution or trigger denial of service. The flaws affect the **Dahua Hero C1 Smart Camera** and multiple Dahua **IPC, SD, and TPC** camera series, with all firmware released before `2025-04-16` reported as vulnerable. Both vulnerabilities carry a **CVSS 3.1 score of 8.1**, and CSIRT.SK warned that successful exploitation could compromise device integrity and the security of monitored premises. Administrators and camera owners were urged to apply Dahua’s available firmware updates promptly to reduce the risk of takeover or service disruption across exposed surveillance deployments.
Jul 24, 2026
Belden disclosed two high-severity vulnerabilities in **Hirschmann Industrial HiVision** that can lead to arbitrary code execution. The more serious issue, tracked as `CVE-2017-20237`, is an authentication bypass in the product's master service that affects versions prior to **06.0.07** and **07.0.03**. An unauthenticated remote attacker can invoke exposed interface methods and execute commands with administrative privileges on the underlying operating system, creating a full remote code execution path with high impact to confidentiality, integrity, and availability. A second flaw, `CVE-2022-4987`, affects **08.1.03** prior to **08.1.04** and **08.2.00** and stems from improper sanitization of paths used to launch user-configured external applications. In that scenario, a low-privileged local attacker can place a malicious binary in the execution path so it runs instead of the intended program, potentially gaining elevated execution depending on deployment context. The vulnerabilities were documented in Belden security guidance and VulnCheck advisories, highlighting both remote and local routes to code execution in Industrial HiVision deployments.
Jun 29, 2026