Approved changes feed: RSS · Atom

cpe:2.3:h:hanwhavision:ane-l6012r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorHanwhavision (79a212ed-d62a-5469-a121-9fe5cc58fd3d)
ProductAne L6012R (dc930c57-1660-5cd2-9caa-f16df5e40fb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6095 vulnerable 2026-06-08 06:19:45.550022 Remote Code Execution without authentication using memory overflow
HIGH (8.9)
Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-04-26T07:09:38.940Z
Updated: 2024-08-02T08:21:17.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5038 not_vulnerable 2026-06-08 06:19:41.184544 Unauthenticated DoS
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-06-25T02:14:06.610Z
Updated: 2024-08-02T07:44:53.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5038 vulnerable 2026-06-08 06:19:41.180986 Unauthenticated DoS
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-06-25T02:14:06.610Z
Updated: 2024-08-02T07:44:53.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5037 not_vulnerable 2026-06-08 06:19:40.812305 Authenticated Command Injection
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2023-11-13T07:42:00.337Z
Updated: 2024-08-02T07:44:53.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5037 vulnerable 2026-06-08 06:19:40.762251 Authenticated Command Injection
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2023-11-13T07:42:00.337Z
Updated: 2024-08-02T07:44:53.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31996 not_vulnerable 2026-06-08 06:04:44.378883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31995 not_vulnerable 2026-06-08 06:04:44.261045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31994 not_vulnerable 2026-06-08 06:04:43.671382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.