EUVD-2018-18058

Malware in sbrugna...

CVE-2018-6296

An undocumented hidden capability for switching the web interface in Hanwha Techwin Smartcams...

CVE-2018-6298

Remote code execution in Hanwha Techwin Smartcams...

Code injection

Unsecured way of firmware update in Hanwha Techwin Smartcams...

CVE-2018-6294

Unsecured way of firmware update in Hanwha Techwin Smartcams...

CVE-2018-6303

Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams...

Remote code execution

Remote code execution in Hanwha Techwin Smartcams...

CVE-2018-6299

Authentication bypass in Hanwha Techwin Smartcams...

CVE-2018-6302

Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams...

CVE-2018-6302

Hanwha Techwin SmartCam is affected by CVE-2018-6302, a cloud-server DoS vulnerability tied to the SmartCam cloud architecture (XMPP-based Jabber server). The issue enables an attacker to block new camera registrations on the cloud, potentially compromising the registration/operation of cameras a...

CVE-2018-6297

Buffer overflow in Hanwha Techwin Smartcams...

CVE-2018-6298

Remote code execution in Hanwha Techwin Smartcams...

CVE-2018-6299

Authentication bypass in Hanwha Techwin Smartcams...

CVE-2018-6303

CVE-2018-6303 affects Hanwha Techwin SmartCam (e.g., SNH-V6410PN/PNW family). The DoS stems from uploading malformed firmware to the camera, with documented root causes including a buffer overflow in the web interface feature used for switching the interface, and broader insecure firmware/update/...

CVE-2018-6296

CVE-2018-6296 concerns Hanwha Techwin SmartCam web interface with an undocumented hidden capability to switch the web UI. Technical details in connected docs show a buffer overflow in the file used for switching the interface (dnpqtjqltm) and an underlying insecure/unauthenticated interaction pat...

CVE-2018-6301

Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams...

CVE-2018-6300

Remote password change in Hanwha Techwin Smartcams...

CVE-2018-6303

Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams...

CVE-2018-6302

Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams...