CVE-2018-11653

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-08-24

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Ip Camera Firmware (Seasofsolutions)

References

• https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11653