Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Sv3c Component: H.264 Poe Ip Camera Firmware Clear all filters
TI-2018-09099 CVE-2018-12675 · GHSA-qr4g-chw5-gprj

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and…

Priority LOW 33

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that the camera's web interface redirects a user to.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0315 Published 2018-10-19 No fix listed CWE-601
TI-2018-09098 CVE-2018-12674 · GHSA-pqph-9h27-7w3m

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and…

Priority LOW 26

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the cookies of a session.

CVSS 3.0MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00573 Published 2018-10-19 No fix listed CWE-319
TI-2018-09097 CVE-2018-12673 · GHSA-4qv6-7v56-f6qv

An attacker with remote access to the SV3C HD Camera (L-SERIES…

Priority LOW 35

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including camera hardware, wireles…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01239 Published 2018-10-19 No fix listed CWE-200
TI-2018-09095 CVE-2018-12671 · GHSA-fw3q-mq79-px68

An attacker with remote access to the SV3C HD Camera (L-SERIES…

Priority MEDIUM 45

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set wi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01273 Published 2018-10-19 No fix listed CWE-200
TI-2018-09091 CVE-2018-12667 · GHSA-w826-74w7-mj44

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and…

Priority MEDIUM 45

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a va…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01471 Published 2018-10-19 No fix listed CWE-287
TI-2018-09090 CVE-2018-12666 · GHSA-c7cc-j2gp-895v

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies…

Priority MEDIUM 46

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrato…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01825 Published 2018-10-19 No fix listed CWE-287