TI-2024-35214 Aliases CVE-2024-52547 GHSA-qf6v-j5x7-cg97

Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

HIGH 67CWE-121Published 2024-12-03 · Updated 2025-09-05

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00719 54th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed 2K Indoor Wi-Fi Security Camera (Lorex): 2.800.0000000.8.R.20241111

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lorex	2K Indoor Wi-Fi Security Camera	before 2.800.0000000.8.R.20241111	2.800.0000000.8.R.20241111	Patch available	CNA

2K Indoor Wi-Fi Security Camera VendorLorex Affected before 2.800.0000000.8.R.20241111 Fixed in 2.800.0000000.8.R.20241111 Patch available CNA

CPE names CISA-ADP · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:::::::*	not specified by CISA-ADP	—	Lorextechnology

cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lorextechnology

Remediation

Fix · CNA 2K Indoor Wi-Fi Security Camera (Lorex) Fixed in 2.800.0000000.8.R.20241111

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2024-12-03
Lorex 2K Indoor Wi-Fi Security Camera 2.800.0000000.8.R.20241111
5 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 82
- TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereferencePriority MEDIUM 63
- TI-2024-35212 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap readPriority MEDIUM 62
Show all 5 records →

Timeline

2026-10-02 Threatist record created from CVE-2024-52547
2026-10-03 Alias added: GHSA-qf6v-j5x7-cg97

References

Exploit 1

https://github.com/sfewer-r7/LorexExploit

Advisory 1

https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/

TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1CRITICAL 9.8
TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference CVSS 3.1MEDIUM 5.3
TI-2024-35212 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read CVSS 3.1MEDIUM 6.5
TI-2026-13192 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution… CVSS 3.0HIGH 7.5
TI-2026-13195 Improper certificate validation in Lorex 2K Indoor Wi-Fi Security Camera CVSS 3.0HIGH 7.5
TI-2024-35215 Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass CVSS 3.1MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences