TI-2024-35211 CVE-2024-52544 · GHSA-mjgg-cggm-7j9f
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
Priority HIGH 82
An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500).
Lorex
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Lorex records in CISA KEVNo Lorex vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2024-35214 CVE-2024-52547 · GHSA-qf6v-j5x7-cg97
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
Priority HIGH 67
An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80).
TI-2024-35213 CVE-2024-52546 · GHSA-gjcw-vmfm-pc8c
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference
Priority MEDIUM 63
An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810).
TI-2024-35212 CVE-2024-52545 · GHSA-g998-4r58-rr8q
Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read
Priority MEDIUM 62
An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876).
TI-2026-13192 CVE-2026-15680 · GHSA-j88j-q5w5-7q9p
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution…
Priority LOW 35
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability.
TI-2026-13195 CVE-2026-15683 · GHSA-4hrf-7rvp-8x6g
Improper certificate validation in Lorex 2K Indoor Wi-Fi Security Camera
Priority LOW 34
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability.
TI-2024-35215 CVE-2024-52548 · GHSA-fp87-jfrm-4f3f
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass
Priority LOW 31
An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code.