Approved changes feed: RSS · Atom
cpe:2.3:a:hanwha_vision_co.,_ltd.:xrn-420s:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hanwha Vision Co., Ltd. (c3728e5c-d1aa-5129-946b-5d75ac242f9a) |
|---|---|
| Product | Xrn 420S (57372748-fbb9-54fa-9df0-5cde21d0637b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41887 |
vulnerable | 2026-06-08 06:43:55.413473 |
Arbitrary File Overwrite
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-12-24T05:20:40.653Z
Updated: 2025-10-01T01:52:22.963Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41886 |
vulnerable | 2026-06-08 06:43:55.413023 |
Improper Input Validation
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-12-24T05:23:52.078Z
Updated: 2025-10-01T01:48:38.916Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41885 |
vulnerable | 2026-06-08 06:43:55.412719 |
Hardcoding sensitive information
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. The seed string for the encrypt key was hardcoding. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-12-24T05:27:39.718Z
Updated: 2025-10-01T01:56:42.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41884 |
vulnerable | 2026-06-08 06:43:55.412400 |
Null Pointer Dereference
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. If an attacker does not enter any value for a specific URL parameter, NULL pointer references will occur and the NVR will reboot. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-12-24T05:30:41.603Z
Updated: 2024-12-24T15:24:24.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41883 |
vulnerable | 2026-06-08 06:43:55.412046 |
Null Pointer Dereference
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the
NVR
. An attacker enters a special value for a specific URL parameter, resulting in a NULL pointer reference and a reboot of the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Published: 2024-12-24T05:32:41.711Z
Updated: 2024-12-24T15:23:56.758Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41882 |
vulnerable | 2026-06-08 06:43:55.411639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6116 |
vulnerable | 2026-06-08 06:19:46.234377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.