Medium severity5.3NVD Advisory· Published Dec 3, 2024· Updated Jun 17, 2026

CVE-2024-52546

Description

An unauthenticated attacker can perform a null pointer dereference in the DHIP Service (UDP port 37810). This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lorex/2K Indoor Wi-Fi Security Camerallm-fuzzy
Range: before 2.800.0000000.8.R.20241111
Lorex/DHIP Servicellm-create
Range: before 2.800.0000000.8.R.20241111
Sfewer R7/Lorexexploitreferences

Patches

Vulnerability mechanics

References

www.rapid7.com/blog/post/2024/12/03/lorex-2k-indoor-wi-fi-security-camera-multiple-vulnerabilities-fixed/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000