CVE-2024-41886 MEDIUM

CVE-2024-41886: Improper Input Validation

Vendor Hanwha Vision Co., Ltd.
Product XRN-420S
Weakness CWE-755
Published December 24, 2024
Last update October 1, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker could inject malformed data into url input parameters to reboot the NVR. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Key dates

02Disclosure timeline

December 24, 2024 CVE published
October 1, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-37284 Elastic Defend Improper Handling of Alternate Encoding Leads to Crash CVE-2022-22174 Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets CVE-2024-21585 Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash CVE-2024-30382 Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured CVE-2023-48232 Floating point Exception in adjust_plines_for_skipcol() in vim