Lucene search

MitreCVE-2018-12673

HistoryOct 19, 2018 - 10:29 p.m.

CVE-2018-12673

2018-10-1922:29:00

CWE-200

mitre

web.nvd.nist.gov

attacker

remote access

sv3c hd camera

disclosure

sensitive information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including camera hardware, wireless network, and local area network information.

Affected configurations

Nvd

Node

sv3ch.264_poe_ip_camera_firmwareMatchv2.3.4.2103-s50-ntd-b20170508b

AND

sv3csv-b01poe-1080p-lMatch-

sv3csv-b11vpoe-1080p-lMatch-

sv3csv-d02poe-1080p-lMatch-

Node

sv3ch.264_poe_ip_camera_firmwareMatchv2.3.4.2103-s50-ntd-b20170823b

AND

sv3csv-b01poe-1080p-lMatch-

sv3csv-b11vpoe-1080p-lMatch-

sv3csv-d02poe-1080p-lMatch-

VendorProductVersionCPE
sv3ch.264_poe_ip_camera_firmwarev2.3.4.2103-s50-ntd-b20170508bcpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170508b:*:*:*:*:*:*:*
sv3csv-b01poe-1080p-l-cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:*:*:*:*:*:*:*
sv3csv-b11vpoe-1080p-l-cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:*:*:*:*:*:*:*
sv3csv-d02poe-1080p-l-cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:*:*:*:*:*:*:*
sv3ch.264_poe_ip_camera_firmwarev2.3.4.2103-s50-ntd-b20170823bcpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170823b:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sv3c	h.264_poe_ip_camera_firmware	v2.3.4.2103-s50-ntd-b20170508b	cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170508b:::::::*
sv3c	sv-b01poe-1080p-l	-	cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:::::::*
sv3c	sv-b11vpoe-1080p-l	-	cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:::::::*
sv3c	sv-d02poe-1080p-l	-	cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:::::::*
sv3c	h.264_poe_ip_camera_firmware	v2.3.4.2103-s50-ntd-b20170823b	cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170823b:::::::*

References

www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Related for CVE-2018-12673