Hanwhavision develops a broad range of network-based surveillance and video management products, including fixed and PTZ cameras such as the PNM series, that are deployed across security infrastructure despite a modest vulnerability disclosure volume. The recurring weaknesses affecting these products—improper input validation, cross-site scripting, certificate validation flaws, and exception-handling gaps—reflect the web-interface and network-protocol exposure inherent to remotely managed video devices. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hanwhavision over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-54013HIGH Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to uninte | Apr 28, 2026 | 8.8 | 33 | NO | NO |
CVE-2024-54011MEDIUM Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The | Apr 28, 2026 | 6.5 | 26 | NO | NO |
CVE-2023-31996HIGH Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function. | May 23, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-5747HIGH Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave server application in | Nov 13, 2023 | 8.8 | 25 | NO | NO |
CVE-2025-52601HIGH Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in Device Manager | Dec 26, 2025 | 7.8 | 24 | NO | NO |
CVE-2025-52600HIGH Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered a vulnerability in camera video a | Dec 26, 2025 | 7.2 | 24 | NO | NO |
CVE-2023-5037HIGH badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execut | Nov 13, 2023 | 7.2 | 24 | NO | NO |
CVE-2024-54012MEDIUM Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicio | Apr 28, 2026 | 5.3 | 23 | NO | NO |
CVE-2025-52599MEDIUM Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered Inadequate of permission manageme | Dec 26, 2025 | 6.5 | 22 | NO | NO |
CVE-2023-5038HIGH badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management p | Jun 25, 2024 | 7.5 | 22 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hanwhavision.
Media articles that mention a CVE ID that affects a product developed by Hanwhavision — matched by CVE ID, not by vendor name.