Priority LOW 39
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions.
CVSS 4.0HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.00193 · Published 2026-04-28 · Fixed in 2.24.00 CWE-306
Priority LOW 38
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device…
CVSS 4.0HIGH 8.5· Adjacent network · High privileges · No interaction · EPSS 0.00256 · Published 2026-04-28 · Fixed in 2.24.00 CWE-78
Priority LOW 24
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0024 · Published 2026-04-28 · Fixed in 2.24.00 CWE-20
Priority LOW 25
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate.
CVSS 4.0MEDIUM 5.8· Network · Low privileges · No interaction · EPSS 0.00201 · Published 2025-12-26 · No fix listed CWE-20
Priority LOW 27
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sen…
CVSS 4.0MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00095 · Published 2025-12-26 · No fix listed CWE-321
Priority LOW 24
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation.
CVSS 4.0MEDIUM 5.2· Network · High privileges · User interaction · EPSS 0.00401 · Published 2025-12-26 · No fix listed CWE-20
Priority LOW 28
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission management for camera guest account.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0023 · Published 2025-12-26 · No fix listed CWE-269
Priority LOW 27
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has found a flaw that camera's client service does not perform certificate validation.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00181 · Published 2025-12-26 · No fix listed CWE-295
Priority MEDIUM 44
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00418 · Published 2024-06-25 · No fix listed CWE-248
Priority LOW 36
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera.
CVSS 4.0HIGH 7.1· Network · High privileges · No interaction · EPSS 0.01513 · Published 2023-11-13 · No fix listed CWE-78
Priority LOW 31
Certain Hanwha products are vulnerable to Denial of Service (DoS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00562 · Published 2023-05-23 · No fix listed