PT-2018-11322 · Sv3C · Sv3C Hd Camera

Published 2018-10-19 · Updated 2019-01-11 · CVE-2018-12671

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SV3C HD Camera versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B

Description The issue allows an attacker with remote access to the camera's web interface to disclose information about the camera, including all password sets. This disclosed information can then be used to gain access to the web interface.

Recommendations For versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B, consider restricting access to the web interface until a fix is available. As a temporary workaround, avoid using the default password sets and consider changing them to stronger, unique passwords. Restrict remote access to the camera's web interface to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-12671

Affected Products

Sv3C Hd Camera

References · 3

• 🔥 https://bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12671 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12671 · Vendor Advisory