Hanwha Vision PNM-9080VQ Firmware

Authentication Bypass

Command Injection

Hardcoding sensitive information

Improper Input Validation

Missing Error/Exception Handling

Inadequate account permissions management

Insufficient certificate validation

Improper Input Validation

Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.