CVE-2023-5037

Q: What is the severity of CVE-2023-5037?

CVE-2023-5037 has a CVSS score of 7.2 (HIGH). This vulnerability allows authenticated attackers to execute arbitrary commands on affected Hanwha Vision cameras through command injection in request packets. Attackers with valid credentials can gain remote code execution on the camera system. This affects Hanwha Vision camera users who haven't applied the security patch.

7.2 HIGH

Remote Code Execution

📋 TL;DR

This vulnerability allows authenticated attackers to execute arbitrary commands on affected Hanwha Vision cameras through command injection in request packets. Attackers with valid credentials can gain remote code execution on the camera system. This affects Hanwha Vision camera users who haven't applied the security patch.

💻 Affected Systems

Products:

Hanwha Vision cameras

Versions: Specific versions not detailed in provided references; consult manufacturer advisory for exact affected versions

Operating Systems: Embedded camera firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Requires authenticated access; cameras with default or weak credentials are particularly vulnerable

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete compromise of camera system allowing attackers to execute arbitrary commands, potentially gaining persistent access, disabling security features, or using the camera as a pivot point into the network.

🟠

Likely Case

Attackers with stolen or default credentials execute commands to disrupt camera functionality, exfiltrate video feeds, or install malware for persistence.

🟢

If Mitigated

With proper network segmentation, strong authentication, and regular patching, impact is limited to isolated camera systems with minimal network access.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: LOW

Exploitation requires authentication but command injection is straightforward once authenticated

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Specific version not provided; refer to manufacturer firmware updates

Vendor Advisory: https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf

Restart Required: Yes

Instructions:

1. Download latest firmware from Hanwha Vision support portal. 2. Upload firmware to camera via web interface. 3. Apply update and restart camera.

🔧 Temporary Workarounds

Network segmentation

all

Isolate cameras on separate VLAN with restricted access

Strong authentication

all

Enforce complex passwords and disable default credentials

🧯 If You Can't Patch

Implement strict network access controls to limit camera communication
Monitor for unusual command execution patterns in camera logs

🔍 How to Verify

Check if Vulnerable:

Check camera firmware version against manufacturer's patched versions list

Check Version:

Check via camera web interface: System > Information > Firmware Version

Verify Fix Applied:

Verify firmware version matches or exceeds patched version from vendor advisory

📡 Detection & Monitoring

Log Indicators:

Unusual command execution in system logs
Multiple failed authentication attempts followed by successful login

Network Indicators:

Unusual outbound connections from camera
Suspicious payloads in HTTP requests to camera

SIEM Query:

source="camera_logs" AND (event="command_execution" OR event="system_call")

📊 Metadata

CVE ID: CVE-2023-5037

CVSS v3 Score: 7.2 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-78

Published: November 13, 2023

Last Updated: November 21, 2024

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ane L6012r Firmware by Hanwhavision

Ane L7012r Firmware by Hanwhavision

Ano L6012r Firmware by Hanwhavision

Ano L6022r Firmware by Hanwhavision

Ano L6082r Firmware by Hanwhavision

Ano L7012r Firmware by Hanwhavision

Ano L7022r Firmware by Hanwhavision

Ano L7082r Firmware by Hanwhavision

Anv L6012r Firmware by Hanwhavision

Anv L6023r Firmware by Hanwhavision

Anv L6082r Firmware by Hanwhavision

Anv L7012r Firmware by Hanwhavision

Anv L7082r Firmware by Hanwhavision

Lnd 6012r Firmware by Hanwhavision

Lnd 6022r Firmware by Hanwhavision

Lnd 6032r Firmware by Hanwhavision

Lnd 6072r Firmware by Hanwhavision

Lno 6012r Firmware by Hanwhavision

Lno 6022r Firmware by Hanwhavision

Lno 6032r Firmware by Hanwhavision

Lno 6072r Firmware by Hanwhavision

Lnv 6012r Firmware by Hanwhavision

Lnv 6022r Firmware by Hanwhavision

Lnv 6032r Firmware by Hanwhavision

Lnv 6072r Firmware by Hanwhavision

Pnm 12082rvd Firmware by Hanwhavision

Pnm 7002vd Firmware by Hanwhavision

Pnm 7082rvd Firmware by Hanwhavision

Pnm 8082vt Firmware by Hanwhavision

Pnm 9000qb Firmware by Hanwhavision

Pnm 9002vq Firmware by Hanwhavision

Pnm 9022v Firmware by Hanwhavision

Pnm 9031rv Firmware by Hanwhavision

Pnm 9084qz Firmware by Hanwhavision

Pnm 9084qz1 Firmware by Hanwhavision

Pnm 9084rqz Firmware by Hanwhavision

Pnm 9084rqz1 Firmware by Hanwhavision

Pnm 9085rqz Firmware by Hanwhavision

Pnm 9085rqz1 Firmware by Hanwhavision

Pnm 9322vqp Firmware by Hanwhavision

Pnm C9022rv Firmware by Hanwhavision

Qnb 8002 Firmware by Hanwhavision

Qnd 6011 Firmware by Hanwhavision

Qnd 6012r Firmware by Hanwhavision

Qnd 6012r1 Firmware by Hanwhavision

Qnd 6021 Firmware by Hanwhavision

Qnd 6022r Firmware by Hanwhavision

Qnd 6022r1 Firmware by Hanwhavision

Qnd 6032r Firmware by Hanwhavision

Qnd 6032r1 Firmware by Hanwhavision

Qnd 6072r Firmware by Hanwhavision

Qnd 6072r1 Firmware by Hanwhavision

Qnd 6073r Firmware by Hanwhavision

Qnd 6082r Firmware by Hanwhavision

Qnd 6082r1 Firmware by Hanwhavision

Qnd 6083r Firmware by Hanwhavision

Qnd 7012r Firmware by Hanwhavision

Qnd 7022r Firmware by Hanwhavision

Qnd 7032r Firmware by Hanwhavision

Qnd 7082r Firmware by Hanwhavision

Qnd 8010r Firmware by Hanwhavision

Qnd 8011 Firmware by Hanwhavision

Qnd 8020r Firmware by Hanwhavision

Qnd 8021 Firmware by Hanwhavision

Qnd 8030r Firmware by Hanwhavision

Qnd 8080r Firmware by Hanwhavision

Qne 8011r Firmware by Hanwhavision

Qne 8021r Firmware by Hanwhavision

Qno 6012r Firmware by Hanwhavision

Qno 6012r1 Firmware by Hanwhavision

Qno 6014r Firmware by Hanwhavision

Qno 6022r Firmware by Hanwhavision

Qno 6022r1 Firmware by Hanwhavision

Qno 6032r Firmware by Hanwhavision

Qno 6032r1 Firmware by Hanwhavision

Qno 6072r Firmware by Hanwhavision

Qno 6072r1 Firmware by Hanwhavision