CVE-2018-12667

The SV3C HD Camera (L-SERIES, firmware variants V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to back-end CGI scripts without a valid session, enabling reading and modification of configuration. Root...

CVE-2018-12666

The CVE-2018-12666 entry concerns SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices where authentication is based solely on a cookie value. The underlying issue allows remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255. The ...