CVE-2024-48214

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data contained within the QR code. By that, the attacker can execute arbitrary code on the camera.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published: Oct 30, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-482178.8An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.CVE-2024-482187.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.CVE-2024-48226.1Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability CVE-2024-482227.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.CVE-2024-482237.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.CVE-2024-482244.9Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.CVE-2024-482256.5Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.CVE-2024-482267.2Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.CVE-2024-482274.9Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).CVE-2024-482286.1An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters an CVE-2024-482297.2funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.CVE-2024-48236.1Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_ban