Medium severity · published Apr 28, 2026
CVE-2024-54012
Command Injection
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QN
QND-8080R · Hanwha Vision
before 2.24.00 · source: vendor
KF
Knb-2000 Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knb-5000n Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2010 Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-5020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-5080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2010rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2120rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-5020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-54012
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-54012
Vendor Advisory
https://www.hanwhavision.com/wp-content/uploads/2026/04/Camera-Vulnerability-ReportCVE-2024-5401154013.pdf
More from QND-8080R
8.8
CVE-2024-54013
Authentication Bypass
6.5
CVE-2024-54011
Missing Error/Exception Handling
