How severe is CVE-2023-31994?

CVE-2023-31994 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.

Is CVE-2023-31994 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (43rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-31994?

CVE-2023-31994 primarily affects Hanwhavision Ane-l6012r Firmware. In total, 430 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2023-31994?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2023-31994 published?

CVE-2023-31994 was published on 2023-05-23 and last updated on 2026-06-17.

CVE-2023-31994

CVE-2023-31994 is a medium-severity vulnerability in Hanwhavision Ane-l6012r Firmware with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 3.x base score 5.3)
EPSS exploit prediction: 1% (43rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Hanwhavision Ane-l6012r Firmware
Published: 2023-05-23
Last modified: 2026-06-17

Description

Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.

Frequently asked questions

What is CVE-2023-31994?: Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02.
How severe is CVE-2023-31994?: CVE-2023-31994 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability low.
Is CVE-2023-31994 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (43rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-31994?: CVE-2023-31994 primarily affects Hanwhavision Ane-l6012r Firmware. In total, 430 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2023-31994?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2023-31994 published?: CVE-2023-31994 was published on 2023-05-23 and last updated on 2026-06-17.

References

Affected products (430)

cpe:2.3:o:hanwhavision:ane-l6012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ane-l7012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l6012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l6022r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l6082r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l7012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l7022r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:ano-l7082r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:anv-l6012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:anv-l6023r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:anv-l6082r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:anv-l7012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:anv-l7082r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:arn-1610s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:arn-410s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:arn-810s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6010r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6011r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6020r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6021r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6022r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6030r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6031r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6032r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6070r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6071r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lnd-6072r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6010r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6011r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6012r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6020r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6021r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6022r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6030r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6031r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6032r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6070r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6071r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:hanwhavision:lno-6072r_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Hanwhavision Ane-l6012r Firmware

CVE-2023-31996 — High (CVSS 8.8): Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special…
CVE-2023-5038 — High (CVSS 7.5): badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An…
CVE-2023-5037 — High (CVSS 7.2): badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An…
CVE-2023-31995 — Medium (CVSS 5.4): Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).

All CVEs affecting Hanwhavision Ane-l6012r Firmware →