Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read
Priority MEDIUM 62CWE-125Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
An unauthenticated attacker can perform an out of bounds heap read in the IQ Service (TCP port 9876). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00739 54th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed 2K Indoor Wi-Fi Security Camera (Lorex): 2.800.0000000.8.R.20241111
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lorex | 2K Indoor Wi-Fi Security Camera | before 2.800.0000000.8.R.20241111 | 2.800.0000000.8.R.20241111 | Patch available | CNA |
- 2K Indoor Wi-Fi Security Camera VendorLorex Affected before 2.800.0000000.8.R.20241111 Fixed in 2.800.0000000.8.R.20241111 Patch available CNA
CPE names CISA-ADP · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lorextechnology |
- cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lorextechnology
Remediation
- Fix · CNA 2K Indoor Wi-Fi Security Camera (Lorex) Fixed in 2.800.0000000.8.R.20241111
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Lorex 2K Indoor Wi-Fi Security Camera 2.800.0000000.8.R.20241111
5 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 82
- TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 67
- TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereferencePriority MEDIUM 63
Timeline
- 2026-10-02 Threatist record created from CVE-2024-52545
- 2026-10-03 Alias added: GHSA-g998-4r58-rr8q
References
More Lorex vulnerabilities
- TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1CRITICAL 9.8
- TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1HIGH 7.2
- TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference CVSS 3.1MEDIUM 5.3
- TI-2026-13192 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution… CVSS 3.0HIGH 7.5
- TI-2026-13195 Improper certificate validation in Lorex 2K Indoor Wi-Fi Security Camera CVSS 3.0HIGH 7.5
- TI-2024-35215 Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass CVSS 3.1MEDIUM 6.7
Sources
- CVE-2024-52545 · CVE Program
- CVE-2024-52545 · NVD
- FIRST EPSS
- GHSA-g998-4r58-rr8q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences