CVE-2024-52548— Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-52548
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass
Source: NVD (National Vulnerability Database)
Vulnerability Description
An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
对数据真实性的验证不充分
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lorex 2K Indoor Wi-Fi Security Camera是加拿大Lorex公司的一系列安全摄像头。 Lorex 2K Indoor Wi-Fi Security Camera 2.800.0000000.8.R.20241111版本之前存在安全漏洞。攻击者利用该漏洞可以执行任意操作系统命令，可以绕过内核中的代码签名强制执行，并执行任意本机代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lorex | 2K Indoor Wi-Fi Security Camera | 0 ~ 2.800.0000000.8.R.20241111 | - |
II. Public POCs for CVE-2024-52548
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-52548
Please Login to view more intelligence information
- Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulns (FIXED) | Rapid7 Blogthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-52548
Same Patch Batch · Lorex · 2024-12-03 · 5 CVEs total
| CVE-2024-52544 | 9.8 CRITICAL | Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow |
| CVE-2024-52547 | 7.2 HIGH | Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow |
| CVE-2024-52545 | 6.5 MEDIUM | Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read |
| CVE-2024-52546 | 5.3 MEDIUM | Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference |
IV. Related Vulnerabilities
Same product: 2K Indoor Wi-Fi Security Camera
Same vendor: Lorex
Same weakness: CWE-345
- CVE-2026-41432
New API: Stripe Webhook Signature Bypass via Empty Secret En - CVE-2026-42206
Roadiz OpenID Connect nonce generated but never validated — - CVE-2026-31835
Vaultwarden WebAuthn credential metadata tampered before sig - CVE-2026-43534
OpenClaw < 2026.4.10 - Unsanitized External Input in Agent H - CVE-2026-7611
TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do
V. Comments for CVE-2024-52548
No comments yet