Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-5747 Details

Description

Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run arbitrary code. HanwhaVision has released patched firmware for the highlighted flaw. Please refer to the hanwhavision security report for more information and solution."

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: Hanwha Vision Co., Ltd.CVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.hanwhavision.com/wp-content/uploads/2023/11/Camera-Vulnerability-Report-CVE-2023-5747_20231113.pdf CVEThird Party Advisory
https://www.hanwhavision.com/wp-content/uploads/2023/11/Camera-Vulnerability-Report-CVE-2023-5747_20231113.pdf Hanwha Vision Co., Ltd.Third Party Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-347Improper Verification of Cryptographic Signature[email protected]
CWE-345Insufficient Verification of Data AuthenticityHanwha Vision Co., Ltd.
CWE-347Improper Verification of Cryptographic SignatureHanwha Vision Co., Ltd.

Affected Products

ProductVersions
hanwhavision wave server software
< 5.1.1.37647

CPE

  • cpe:2.3:a:hanwhavision:wave_server_software:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hanwhavision pno-a6081r-e1t firmware
2.21.02

CPE

  • cpe:2.3:o:hanwhavision:pno-a6081r-e1t_firmware:2.21.02:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hanwhavision pno-a6081r-e1t
All versions

CPE

  • cpe:2.3:h:hanwhavision:pno-a6081r-e1t:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hanwhavision pno-a6081r-e2t firmware
2.21.02

CPE

  • cpe:2.3:o:hanwhavision:pno-a6081r-e2t_firmware:2.21.02:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
hanwhavision pno-a6081r-e2t
All versions

CPE

  • cpe:2.3:h:hanwhavision:pno-a6081r-e2t:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-5747
NVD Published Date:
Nov 13, 2023
NVD Last Modified:
Jun 17, 2026
Source:
Hanwha Vision Co., Ltd.
CVE-2023-5747 Details - Not Deferred