CVE-2023-5038 Unauthenticated DoS
An unauthenticated attacker can cause a denial of service on Hanwha Vision cameras by sending a crafted URL, requiring a manual device restart.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-5038?
CVE-2023-5038 is a high-severity denial of service vulnerability in Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera, published on 25 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Which versions are affected by CVE-2023-5038?
It affects 183 products.
Products include Hanwhavision Ane-L6012r Firmware, Hanwhavision Ane-L7012r Firmware, Hanwhavision Ano-L6012r Firmware, Hanwhavision Ano-L6022r Firmware, Hanwhavision Ano-L6082r Firmware, Hanwhavision Ano-L7012r Firmware and 177 more.
How do I fix CVE-2023-5038?
No fix has been published for CVE-2023-5038 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-5038 being exploited?
There is no known exploitation of CVE-2023-5038 in the wild and no public exploit code.
Other vulnerabilities in Hanwha Vision Co., Ltd. A-Series, Q-Series, PNM-series Camera
Sources
Also known as GHSA-95c3-qh99-cvf2.