VULNERABILITY INTELLIGENCE

CVE-2023-5038

CVSS score7.5 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Weakness classification

  • fc9afe74-3f80-4fb7-a313-e6f036a89882: CWE-248
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references