CVE-2018-6408

2018-01-3021:00:00

mitre

www.cve.org

conceptronic

csrf

administrator account

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

32.3%

JSON

An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. CSRF exists in hy-cgi/user.cgi, as demonstrated by changing an administrator password or adding a new administrator account.

References

github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/