PT-2018-1149 · Hanwha Techwin · Snh-V6410Pn+1

Andrey Muravitsky + 1 · Published 2018-03-12 · Updated 2018-04-09 · CVE-2018-6298

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hanwha Techwin Smartcams (affected versions not specified) Hanwha Techwin SNH-V6410PN and SNH-V6410PNW (affected versions not specified)

Description The issue is related to remote code execution in Hanwha Techwin Smartcams. A software vulnerability exists in Hanwha Techwin SNH-V6410PN and SNH-V6410PNW cameras due to insufficient input validation. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.

Recommendations For Hanwha Techwin Smartcams, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Hanwha Techwin SNH-V6410PN and SNH-V6410PNW, consider restricting access to the cameras until a patch is available.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-00586

CVE-2018-6298

Affected Products

Hanwha Techwin Smartcams

Snh-V6410Pn

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-6298 · Security Note
• https://bdu.fstec.ru/vul/2018-00586 · Security Note
• https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309 · Note
• https://securelist.ru/somebodys-watching-when-cameras-are-more-than-just-smart/88935 · Note