CVE-2024-52548

Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass

An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

Affected

Lorex · 2K Indoor Wi-Fi Security Camera

CVSS v3.1 RAPID7

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.16% chance of exploitation in the next 30 days, 5th percentile

Published

2024-12-03

Proof-of-concept exploits (1)

• sfewer-r7/LorexExploit21★ · 2024-12-03

References

• CVE Record
• NVD entry

Related

• CVE-2023-27532
• CVE-2023-34362
• CVE-2024-51977
• CVE-2024-51978
• CVE-2024-51979
• CVE-2024-51980