PT-2023-23559 · Hanwha · Hanwha Ip Camera Ane-L7012R+1

Published 2023-05-23 · Updated 2025-01-17 · CVE-2023-31994

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Hanwha IP Camera ANE-L7012R version 1.41.01 Hanwha IP Camera XNV-9082R version 2.10.02

Description The issue is related to a Denial of Service (DoS) condition. It occurs when an empty UDP packet is sent to the listening service, causing the service thread to become non-functional via WS Discovery and Hanwha proprietary discovery services.

Recommendations For Hanwha IP Camera ANE-L7012R version 1.41.01, consider disabling the WS Discovery and Hanwha proprietary discovery services as a temporary workaround until a patch is available. For Hanwha IP Camera XNV-9082R version 2.10.02, consider disabling the WS Discovery and Hanwha proprietary discovery services as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2023-31994

Affected Products

Hanwha Ip Camera Ane-L7012R

Hanwha Ip Camera Xnv-9082R

References · 5

• https://hanwhavisionamerica.com/download/50042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31994 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31994 · Vendor Advisory
• https://hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf · Note
• https://t.me/cibsecurity/64589 · Telegram Post