CVE-2018-10734

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-05-08

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• A303 Firmware (Kongtop)
• A403 Firmware (Kongtop)
• D303 Firmware (Kongtop)
• D305 Firmware (Kongtop)
• D403 Firmware (Kongtop)

References

• https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf
• https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf
• https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py