CVE-2018-12672

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or the administrator.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2018-10-19

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• H.264 Poe Ip Camera Firmware (Sv3c)

References

• https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/