CVE-2024-54013 HIGH

CVE-2024-54013: Authentication Bypass

Vendor Hanwha Vision
Product QND-8080R
Weakness CWE-306 · Missing auth
Published April 28, 2026
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

Key dates

02Disclosure timeline

April 28, 2026 CVE published
April 28, 2026 Record updated