CVEvulnerability

CVE-2018-12671

9.8 CRITICAL Published 2018-10-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface.

Affected configurations

• sv3c h.264 poe ip camera firmware v2.3.4.2103-s50-ntd-b20170508b • sv3c h.264 poe ip camera firmware v2.3.4.2103-s50-ntd-b20170823b

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References