CVE-2024-54012 — Command Injection
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing mali…
Published: 2026-04-28 · CVSS: 8.5 · CVSS 4.0
Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to the manufacturer's report for details and workarounds.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7