CVE-2024-54013 is a vulnerability in the Hanwha Vision QND-8080R device's web server component where missing authentication for a critical function could lead to unauthorized access. The flaw was identified by Amazon penetration testers and is categorized as CWE-306. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The manufacturer has released patch firmware to address this issue, though specific patch details are not included in the provided data. No known exploits have been reported in the wild.

The vulnerability allows attackers to access protected functions on the QND-8080R device without proper authentication, potentially compromising confidentiality, integrity, and availability of the device. Given the high CVSS score and the nature of the flaw, exploitation could lead to significant unauthorized control or disruption of device functions. No known exploits are currently active in the wild.

The manufacturer has released patch firmware to remediate this vulnerability. Users should refer to the official manufacturer's report for detailed patching instructions and any available workarounds. Patch status is not explicitly confirmed in the provided data, so users must verify the latest firmware availability and apply updates promptly to mitigate the risk.