CVE-2018-6295

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...

CVE-2018-6298

CVE-2018-6298 corresponds to a remote code execution vulnerability in Hanwha Techwin SmartCam devices. Connected sources confirm the affected product family (SmartCam cameras) and describe multiple weaknesses in the cloud architecture and local web/IPC interfaces that could enable an attacker wit...

CVE-2018-6294

CVE-2018-6294 concerns Hanwha Techwin Smartcams and is described as an insecure firmware update method. Public sources detail multiple concerns around the SmartCam cloud architecture and web interface: updates/communications over insecure HTTP, unauthenticated internal IPC between admin and mainS...

CVE-2018-6297

CVE-2018-6297 is a buffer overflow vulnerability in Hanwha Techwin Smartcams. The issue, documented as affecting the SmartCam web interface and its cloud/IPC components (notably a buffer overflow in the file dnpqtjqltm and related command handling), can lead to denial of service and, per research...

CVE-2018-6301

Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams...

CVE-2018-6302

Hanwha Techwin SmartCam is affected by CVE-2018-6302, a cloud-server DoS vulnerability tied to the SmartCam cloud architecture (XMPP-based Jabber server). The issue enables an attacker to block new camera registrations on the cloud, potentially compromising the registration/operation of cameras a...