2K Indoor Wi Fi Security Camera
Approved changes feed: RSS · Atom
cpe:2.3:a:lorex:2k_indoor_wi-fi_security_camera:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lorex (b8e16b79-68ab-5bd4-9671-49cf2c4f1cdb) |
|---|---|
| Product | 2K Indoor Wi Fi Security Camera (5173c8f4-e94e-5b88-9925-e6aa43f87d6a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15683 |
vulnerable | 2026-07-29 00:26:18.361852 |
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability
HIGH (7.5)
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to exploit this vulnerability.
The specific flaw exists within the device management functionality. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-26851.
Published: 2026-07-13T21:30:56.601Z
Updated: 2026-07-14T12:52:06.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15680 |
vulnerable | 2026-07-29 00:26:18.360325 |
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
HIGH (7.5)
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the parsing of JSON requests in the sonia binary. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-25884.
Published: 2026-07-13T21:32:15.740Z
Updated: 2026-07-14T12:47:53.179Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52548 |
vulnerable | 2026-06-08 06:52:16.044175 |
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass
MEDIUM (6.7)
An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Published: 2024-12-03T17:29:59.241Z
Updated: 2024-12-03T21:04:00.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52547 |
vulnerable | 2026-06-08 06:52:16.043630 |
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
HIGH (7.2)
An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Published: 2024-12-03T17:25:31.962Z
Updated: 2025-09-05T08:31:14.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52546 |
vulnerable | 2026-06-08 06:52:16.043294 |
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference
MEDIUM (5.3)
An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Published: 2024-12-03T17:23:01.246Z
Updated: 2024-12-03T21:03:10.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52545 |
vulnerable | 2026-06-08 06:52:16.042819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52544 |
vulnerable | 2026-06-08 06:52:16.042385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.