CVE-2018-12667

Опубликовано: 19 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the configuration. The vulnerability affects all versions.

Ссылки

https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
Exploit
Third Party Advisory
https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170508b:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:*:*:*:*:*:*:*

cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:*:*:*:*:*:*:*

cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170823b:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:*:*:*:*:*:*:*

cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:*:*:*:*:*:*:*

cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00764

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-w826-74w7-mj44