Hanwhavision vulnerabilities
We track 10 vulnerabilities in Hanwhavision products across 60+ products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
Latest Hanwhavision vulnerabilities
- 8.8 High severity
QND-8080R: Missing Authentication for Critical Functionality
Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware
- 7.8 High severity
Device Manager: Use of Hard-coded Cryptographic Key
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager that a hardcoded encryption key for sensitive information. An attacker can use
- 7.2 High severity
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial…
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attac
- 7.5 High severity
A-Series, Q-Series, PNM-series Camera: Uncaught Exception
badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manu
- 8.9 High severity
XRN-420S: Stack-based Buffer Overflow
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, pleas
- 7.4 High severity
HRX-1620: Exposure of Resource to Wrong Sphere
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer
- 8.9 High severity
HRX-1620: Stack-based Buffer Overflow
Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the
- 8.8 High severity
PNV-A6081R: Improper Verification of Cryptographic Signature
Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in camera device was vulnerable to command injection allowing an attacker to run ar
- 7.2 High severity
A-Series, Q-Series, PNM-series Camera: Improper Neutralization of Special Elements used in an OS Command
badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please ref
- 8.8 High severity
Ane-l6012r Firmware: Improper Neutralization of Special Elements used in a Command
Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function.