Lorex vulnerabilities
We track 4 vulnerabilities in Lorex products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
Latest Lorex vulnerabilities
- 7.5 High severity
2K Indoor Wi-Fi Security Camera: Improper Certificate Validation
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Us
- 7.5 High severity
2K Indoor Wi-Fi Security Camera: Use of Externally-Controlled Format String
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authent
- 7.2 High severity
2K Indoor Wi-Fi Security Camera: Stack-based Buffer Overflow
An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service (TCP port 80). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
- 9.8 Critical severity
2K Indoor Wi-Fi Security Camera: Stack-based Buffer Overflow
An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service (TCP port 3500). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.