TI-2024-35215 Aliases CVE-2024-52548 GHSA-fp87-jfrm-4f3f

Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass

LOW 31CWE-345Published 2024-12-03 · Updated 2024-12-03

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-345.

Summary

An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00163 5th percentileScored 2026-11-08

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed 2K Indoor Wi-Fi Security Camera (Lorex): 2.800.0000000.8.R.20241111

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lorex	2K Indoor Wi-Fi Security Camera	before 2.800.0000000.8.R.20241111	2.800.0000000.8.R.20241111	Patch available	CNA

2K Indoor Wi-Fi Security Camera VendorLorex Affected before 2.800.0000000.8.R.20241111 Fixed in 2.800.0000000.8.R.20241111 Patch available CNA

CPE names CISA-ADP · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:::::::*	not specified by CISA-ADP	—	Lorextechnology

cpe:2.3:o:lorextechnology:w461asc-e_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lorextechnology

Remediation

Fix · CNA 2K Indoor Wi-Fi Security Camera (Lorex) Fixed in 2.800.0000000.8.R.20241111

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2024-12-03
Lorex 2K Indoor Wi-Fi Security Camera 2.800.0000000.8.R.20241111
5 records Highest priority Priority HIGH 2 HIGH, 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 82
- TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflowPriority HIGH 67
- TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereferencePriority MEDIUM 63
Show all 5 records →

Timeline

2026-10-02 Threatist record created from CVE-2024-52548
2026-10-03 Alias added: GHSA-fp87-jfrm-4f3f

References

Exploit 1

https://github.com/sfewer-r7/LorexExploit

Advisory 1

https://www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/

TI-2024-35211 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1CRITICAL 9.8
TI-2024-35214 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow CVSS 3.1HIGH 7.2
TI-2024-35213 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference CVSS 3.1MEDIUM 5.3
TI-2024-35212 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read CVSS 3.1MEDIUM 6.5
TI-2026-13192 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution… CVSS 3.0HIGH 7.5
TI-2026-13195 Improper certificate validation in Lorex 2K Indoor Wi-Fi Security Camera CVSS 3.0HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences