exploitDog

CVE-2018-16546

Опубликовано: 05 сент. 2018

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.

Ссылки

https://seclists.org/bugtraq/2018/Sep/6
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2018/Sep/6
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:amcrest:amcrest_ipc-hx1x3x-lexus_eng_n_amcrest:v2.420.ac01.3.r.20180206:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00341

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-798

Связанные уязвимости

GHSA-c5gc-77wf-jm29

CVSS3: 5.9

github

больше 3 лет назад

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.

EPSS

Процентиль: 56%

0.00341

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-798