CVE-2024-54013 Authentication Bypass

High 8.7 Published 28 Apr 2026 Updated 28 Apr 2026

Attackers can bypass authentication to access protected functions on Hanwha Vision cameras due to flawed request handling.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-54013?

CVE-2024-54013 is a high-severity authentication bypass vulnerability in Hanwha Vision QND-8080R, published on 28 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

Weakness: CWE-306

Which versions are affected by CVE-2024-54013?

It affects 253 products.

Products include Hanwhavision Knb-2000 Firmware, Hanwhavision Knb-5000n Firmware, Hanwhavision Knd-2010 Firmware, Hanwhavision Knd-2020rn Firmware, Hanwhavision Knd-2080rn Firmware, Hanwhavision Knd-5020rn Firmware and 247 more.

How do I fix CVE-2024-54013?

No fix has been published for CVE-2024-54013 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2024-54013 being exploited?

There is no known exploitation of CVE-2024-54013 in the wild and no public exploit code.

Sources

Also known as GHSA-p6vp-4f63-q49c.