CVE-2018-12669 SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param...
HighCVSS 8.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sv3c h.264 poe ip camera firmware | = v2.3.4.2103-s50-ntd-b20170508b | No fix listed |
| sv3c h.264 poe ip camera firmware | = v2.3.4.2103-s50-ntd-b20170823b | No fix listed |
References
- www.bishopfox.com exploit third-party-advisory