CVE-2024-0885 is a medium severity (CVSS 5.3) denial of service in SpyCamLizard 1.230, through its HTTP GET request handler. The record names no fix and a public exploit exists. Keep the service off the internet, or replace it with a maintained product.
What's affected
SpyCamLizard 1.230. The affected component is the HTTP GET Request Handler. The record says the manipulation leads to denial of service, the attack may be launched remotely, and an exploit has been disclosed publicly. A Packet Storm entry is among the references.
No fixed version is listed.
The record classifies the weakness as CWE-404 (improper resource shutdown or release). NVD scores it 5.3 (Medium) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
The description calls the issue problematic, while NVD scores it 5.3 (Medium). The two agree that the impact is availability only.
How to check if you're exposed
There is no package manager command that answers this one, because the record points to a standalone application or a product that publishes no version history. Start with an inventory question: do you run SpyCamLizard anywhere, including test servers, lab machines and forgotten demo installs?
If you build software from source, search your repositories and artifact stores for the project name. The free in-browser dependency scan can flag known issues in the dependencies it finds, which helps when the component is vendored or pulled in transitively.
What to do now
- Find hosts running SpyCamLizard 1.230.
- Block inbound access to its HTTP port from untrusted networks.
- Check for a newer release from the vendor, and consider replacing the product.
- Add a supervisor that restarts the service if it stops, as a stopgap.
Why it matters
The record lists CWE-404, improper resource shutdown or release. A request handler that does not clean up after a malformed request can crash or hang the service. The impact is availability only, and for a camera tool that can mean lost monitoring at a bad time.
If the service is only meant for a local network, firewalling it removes most of the exposure.
The record does not mark this CVE as being in the CISA Known Exploited Vulnerabilities catalog, and nothing in the record says it is exploited in the wild. That can change, so keep it on your watch list.
Quick check
Is data at risk?
The record describes denial of service only. It does not mention data exposure.
Sources
The links below are the references listed in the CVE record. The record and its description were the basis for this post, and the vendor advisory remains the authority for fixed versions.
Last reviewed: 19 October 2026.
