TI-2024-35213 Aliases CVE-2024-52546 GHSA-gjcw-vmfm-pc8c

Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference

MEDIUM 63CWE-476Published 2024-12-03 · Updated 2024-12-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-476.

Summary

An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00802 56th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed 2K Indoor Wi-Fi Security Camera (Lorex): 2.800.0000000.8.R.20241111

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lorex	2K Indoor Wi-Fi Security Camera	before 2.800.0000000.8.R.20241111	2.800.0000000.8.R.20241111	Patch available	CNA

2K Indoor Wi-Fi Security Camera VendorLorex Affected before 2.800.0000000.8.R.20241111 Fixed in 2.800.0000000.8.R.20241111 Patch available CNA

CPE names CISA-ADP · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:::::::*	not specified by CISA-ADP	—	Lorextechnology

cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lorextechnology

Remediation

Fix · CNA 2K Indoor Wi-Fi Security Camera (Lorex) Fixed in 2.800.0000000.8.R.20241111

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2024-12-03
Lorex 2K Indoor Wi-Fi Security Camera 2.800.0000000.8.R.20241111
5 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 82
- TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 67
- TI-2024-35212 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap readPriority MEDIUM 62
Show all 5 records →

Timeline

2026-10-02 Threatist record created from CVE-2024-52546
2026-10-03 Alias added: GHSA-gjcw-vmfm-pc8c

References

Exploit 1

https://github.com/sfewer-r7/LorexExploit

Advisory 1

https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/

TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1CRITICAL 9.8
TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1HIGH 7.2
TI-2024-35212 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read CVSS 3.1MEDIUM 6.5
TI-2026-13192 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution… CVSS 3.0HIGH 7.5
TI-2026-13195 Improper certificate validation in Lorex 2K Indoor Wi-Fi Security Camera CVSS 3.0HIGH 7.5
TI-2024-35215 Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass CVSS 3.1MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences