CVE-2018-12669

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-10-19

Last modified

2024-08-05

Affected products

• H.264 Poe Ip Camera Firmware (Sv3c)

References

• https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/