LG Innotek Camera Model LNV5110R

An attacker who gains administrative access to the LNV5110R camera could alter or disable video surveillance of critical infrastructure, potentially allowing other physical intrusions or sabotage to go undetected.

Water and electric utilities that use LG Innotek LNV5110R network cameras for perimeter or facility surveillance should be concerned. This includes security monitoring systems at treatment plants, substations, pump stations, and critical access points.

An attacker on the network sends a specially crafted request to the camera's administrative interface. Due to the high attack complexity, the attacker must have specific knowledge of the device configuration or internal workings, but once successful, they obtain full administrative control without needing credentials.