CVE-2024-52548

Name of the Vulnerable Software and Affected Versions Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111

Description An attacker who can execute arbitrary Operating Systems commands can bypass code signing enforcements in the kernel and execute arbitrary native code. The issue allows manipulation that leads to insufficient data authenticity verification.

Recommendations For versions prior to 2.800.0000000.8.R.20241111, upgrade to version 2.800.0000000.8.R.20241111 or later to resolve the issue. As a temporary workaround, consider restricting access to the kernel to minimize the risk of exploitation.