CVE-2018-20956

CVE-2018-20956 affects Swann SWWHD-INTCAM-HD devices, where the pre-shared key (PSK) is left in logs after a factory reset. This is an information disclosure risk, as logged PSKs could be exposed to an attacker with access to device logs. The public descriptions consistently reference the issue a...

CVE-2018-20955: Use of Hard-coded Credentials

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...

CVE-2018-20956: Insertion of Sensitive Information into Log File

Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...