High severity · published Apr 28, 2026
CVE-2024-54013
Authentication Bypass
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QN
QND-8080R · Hanwha Vision
before 2.24.00 · source: vendor
KF
Knb-2000 Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knb-5000n Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2010 Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-2080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-5020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Knd-5080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2010rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2080rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-2120rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
KF
Kno-5020rn Firmware · Hanwhavision
before 2.23.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-54013
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-54013
Vendor Advisory
https://www.hanwhavision.com/wp-content/uploads/2026/04/Camera-Vulnerability-ReportCVE-2024-5401154013.pdf
More from QND-8080R
6.5
CVE-2024-54011
Missing Error/Exception Handling
5.3
CVE-2024-54012
Command Injection