CVE-2018-12666

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255...

CVE-2018-12673

CVE-2018-12673 affects SV3C HD Camera (L-SERIES) with firmware builds V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B. An attacker with remote access to the camera’s web interface can disclose information about the device and its network environments (camera hardware, wireless L...

CVE-2018-12675

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B does not perform origin checks on URLs that the camera's web interface redirects a user to. This can be leveraged to send a user to an unexpected endpoint...

CVE-2018-12673

An attacker with remote access to the SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B web interface can disclose information about the camera including camera hardware, wireless network, and local area network information...

CVE-2018-12672

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or th...

CVE-2018-12672

The CVE-2018-12672 entry pertains to the SV3C L-SERIES HD CAMERA (version V2.3.4.2103-S50-NTD-B20170508B). The root cause is improper validation of user-supplied input, enabling cross-site scripting. The vulnerability could allow actions on behalf of another user or the administrator if proper au...

CVE-2018-12671

The CVE-2018-12671 entry concerns SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B). The vulnerability allows a remote attacker who can access the camera’s web interface to disclose information about the camera, including all password sets stored within t...

CVE-2018-12674

The CVE-2018-12674 issue affects SV3C L-SERIES HD CAMERA (versions V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B). The root cause is that the device stores the username and password in session cookies; possession of those cookies could allow an attacker to obtain the logged‑in...

CVE-2018-12668

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password...

CVE-2018-12675

The SV3C HD Camera L Series (firmware 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B) contains an open redirect vulnerability due to missing origin checks on URLs the camera’s web interface redirects to. This can allow a user to be redirected to an unexpected endpoint, potentiall...

CVE-2018-12669

CVE-2018-12669 affects SV3C L-Series HD Camera devices with versions V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B. A remote authenticated attacker can reset arbitrary user accounts via a request to web/cgi-bin/hi3510/param.cgi. The NVD reports CVSS v3.0 base score 8.8 (HIGH) ...

CVE-2018-12670

SV3C L-SERIES HD CAMERA OS Command Injection (CVE-2018-12670) affects firmware V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B. The vulnerability stems from the program failing to properly detect/validate user input, allowing an attacker to execute arbitrary OS commands on the d...

CVE-2018-12671

An attacker with remote access to the SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web...

CVE-2018-12674

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in...

CVE-2018-12667

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the...

CVE-2018-12667

The SV3C HD Camera (L-SERIES, firmware variants V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to back-end CGI scripts without a valid session, enabling reading and modification of configuration. Root...

CVE-2018-12666

The CVE-2018-12666 entry concerns SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices where authentication is based solely on a cookie value. The underlying issue allows remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255. The ...

CVE-2018-12670

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27568)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/rpmsg/rpmsgomx.c in the kernel component of the Amazon Kindle Fire HD3rd Fire OS. A...

Amazon Kindle Fire HD(3rd) Fire OS Denial of Service Vulnerability (CNVD-2019-27571)

The Amazon Kindle Fire HD 3rd is the third generation of the Fire tablet product from Amazon.com USA, for which Fire OS is the operating system used. A denial of service vulnerability exists in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component of the Amazon Kindle Fire HD3rd Fir...