CVE-2024-52546

Name of the Vulnerable Software and Affected Versions: Lorex 2K Indoor Wi-Fi Security Camera versions prior to 2.800.0000000.8.R.20241111

Description: An unauthenticated attacker can perform a null pointer dereference in the DHIP Service using the UDP port 37810. This issue can potentially allow a remote attacker to elevate privileges to the root level and gain full access to the device.

Recommendations: For versions prior to 2.800.0000000.8.R.20241111, update the firmware to version 2.800.0000000.8.R.20241111 to resolve the issue. As a temporary workaround, consider restricting access to the DHIP Service on UDP port 37810 until the update is applied.