CVE-2018-6296

CVE-2018-6296 concerns Hanwha Techwin SmartCam web interface with an undocumented hidden capability to switch the web UI. Technical details in connected docs show a buffer overflow in the file used for switching the interface (dnpqtjqltm) and an underlying insecure/unauthenticated interaction pat...

CVE-2018-6298

CVE-2018-6298 corresponds to a remote code execution vulnerability in Hanwha Techwin SmartCam devices. Connected sources confirm the affected product family (SmartCam cameras) and describe multiple weaknesses in the cloud architecture and local web/IPC interfaces that could enable an attacker wit...

CVE-2018-6300

Remote password change in Hanwha Techwin Smartcams...

CVE-2018-6302

Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams...

CVE-2018-6303

Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams...

CVE-2018-6295

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...