How severe is CVE-2024-54011?

CVE-2024-54011 has a CVSS score of 6.5 (Medium severity). EPSS score: 0.24% (15th percentile), indicating the estimated probability of exploitation in the wild.

CVE-2024-54011:

Armis Vulnerability Intelligence Database

By combining AI with human insight, Armis Vulnerability Intelligence Database offers extended coverage for vulnerabilities that matter to you, your industry, and provides you with clear remediation instructions.

CVE Name	Severity Score	Published Date	CISA KEV

New from Armis

Armis Pulse

One CVE. Every day. Curated by Armis researchers and delivered to your inbox or RSS reader.

SUBSCRIBE FREE

Perspectives, Insights, and News

This Year Vulnerability Management Moves from the Basement to the C-suite

The evolution of cybersecurity practices are reshaping how organizations tackle vulnerabilities.

READ BLOG→

Closing the Loop

Making security everyone's business with prioritization and collaboration.

READ CASE STUDY→

The State of Cyberwarfare

The state of Cyberwarfare

LEARN MORE→

Focus on What Matters

See everything.Identify true risk.Proactively mitigate threats.Book a Demo

Let's talk!

CVE-2024-54011 | Medium Severity | Armis

Description Preview

An authenticated network attacker can send a malformed request to the HTTP/CGI interface of Hanwha Vision IP cameras, causing the camera service to crash and disrupting video surveillance availability.

Overview

This vulnerability affects a large number of Hanwha Vision IP camera models across multiple firmware branches. The fixed versions vary by product family: firmware prior to 2.10.03, 2.10.04, 2.10.06, 2.10.07, 2.22.10, 2.23.00, 2.23.01, or 2.24.00 are affected depending on the specific model. The NVD primary CVSS 3.1 score is 6.5 (Medium, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), while the vendor-assigned CVSS 4.0 score is 5.3 (Medium, VA:L). The divergence is meaningful: the NVD score rates availability impact as High (full service crash), while the vendor rates it as Low, suggesting the vendor believes the service recovers or the disruption is partial. The NVD score is more conservative and appropriate for triage purposes. No active exploitation is reported.

Remediation

Obtain patched firmware directly from Hanwha Vision's support portal. The target firmware version depends on your camera model family: upgrade to 2.24.00 for models such as QND-8080R, XNF-9010 series, XNO-6083R, XNO-6123R, XNO-8082R/8083R, XNO-9082RZ/9083R, XNV-6083R/6123R, XNV-8082R/8083R series, XNV-9082R/9083R, XNB-6002/6003/6005/8002/8003/9002/9003, XND-8082RV/8083RV/8093RV/9082RF/9082RV/9083RV, XNP-6400 series, XNP-8250/9250 series, XNP-C/XNV-C/XNO-C/XND-C series, TNV-C7013RC, and XNF-9013RV; upgrade to 2.23.01 for the majority of XNO-6xxx/8xxx, XNV-6xxx/8xxx, XND-6xxx/8xxx, XNB-6000/8000, XNP-6xxx, PND-A/PNV-A, QNP-6xxx, and related models; upgrade to 2.23.00 for PNM-7000VD/9000VD/9002VQ/9080VQ/9081VQ/9084QZ/9085RQZ/9320VQP/9321VQP/9322VQP series; upgrade to 2.22.10 for QND-C8013R/C8023R, QNE-C8013RL/C9013RL, QNF-C9010, QNO-C6083R/C8013R/C8023R/C8083R/C9083R, QNV-C6083R/C8011R/C8012/C8013R/C8023R/C8083R/C9011R/C9083R, QNO-C8083R/C9083R, TNV-C8011RW/C8014RM/C8034RM; upgrade to 2.10.07 for XNF-8010R/RV/RVM/RVMNB/RVW/RW and QNP-6250R/6320R; upgrade to 2.10.06 for XNB-6001; upgrade to 2.10.04 for XNO-6120, XNV-6081RE/8081RE, XND-6081REV/8081REV, XNZ-6320/L6320; upgrade to 2.10.03 for XNV-6012/6012M/6013M/6022R/6022RM, TNB-6030, TNV-7010RC, QNF-8010. The vendor advisory PDF is available at the reference below. If immediate firmware update is not possible, restrict network access to camera management interfaces using firewall rules or VLAN segmentation to limit exposure to trusted networks only; this reduces the attack surface since exploitation requires network reachability and valid credentials.