Command injection

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

CVE-2018-12666

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255...

CVE-2018-12670

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

Hardcoded credentials

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password...

CVE-2018-12670

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

CVE-2018-12670

SV3C L-SERIES HD CAMERA OS Command Injection (CVE-2018-12670) affects firmware V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B. The vulnerability stems from the program failing to properly detect/validate user input, allowing an attacker to execute arbitrary OS commands on the d...

CVE-2018-12668

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password...

PT-2018-11321

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue allows OS Command Injection, which can be exploited by attackers. No information is provided about the estimated numbe...

CVE-2018-12670: Improper Neutralization of Special Elements used in an OS Command

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection...

PT-2018-11319

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue allows remote authenticated users to reset arbitrary accounts. This can be achieved by sending a request to the...

PT-2018-11318

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA versions V2.3.4.2103-S50-NTD-B20170508B through V2.3.4.2103-S50-NTD-B20170823B Description The issue concerns a hard-coded password in the affected devices. Recommendations For versions V2.3.4.2103-S50-NTD-B20170508B an...

CVE-2018-12666: Improper Authentication

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255...

PT-2018-11316

Name of the Vulnerable Software and Affected Versions SV3C L-SERIES HD CAMERA version 2.3.4.2103-S50-NTD-B20170508B Description The issue allows remote attackers to bypass authentication and gain administrator access. This is possible because the device improperly identifies users only by the...

CVE-2018-12668: Use of Hard-coded Credentials

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password...

CVE-2018-12669: Undefined Security Weakness

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi...