PT-2024-29615 · Nvr · Nvr

Published 2024-12-24 · Updated 2024-12-24 · CVE-2024-41884

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NVR (affected versions not specified)

Description A flaw has been found that allows for remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur, causing the NVR to reboot. The manufacturer has released patch firmware for the flaw.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2024-41884

Affected Products

Nvr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-41884 · Security Note
• https://hanwhavision.com/wp-content/uploads/2024/12/NVR-Vulnerability-Report-CVE-2024-4188241887.pdf · Vendor Advisory
• https://twitter.com/CVEnew/status/1871433199739380038 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1871457134119911435 · Twitter Post
• https://t.me/cvedetector/13558 · Telegram Post