9.8

CVE-2018-12671

Exploit
An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sv3c ≫ H.264 Poe Ip Camera Firmware Versionv2.3.4.2103-s50-ntd-b20170508b
   Sv3c ≫ Sv-b01poe-1080p-l Version-
   Sv3c ≫ Sv-b11vpoe-1080p-l Version-
   Sv3c ≫ Sv-d02poe-1080p-l Version-
Sv3c ≫ H.264 Poe Ip Camera Firmware Versionv2.3.4.2103-s50-ntd-b20170823b
   Sv3c ≫ Sv-b01poe-1080p-l Version-
   Sv3c ≫ Sv-b11vpoe-1080p-l Version-
   Sv3c ≫ Sv-d02poe-1080p-l Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.547
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.