What is CVE-2018-12671?

CVE-2018-12671 is a critical-severity vulnerability in Sv3c H.264 Poe Ip Camera Firmware, classified under Information Disclosure. CVSS score: 9.8/10. Published 2018-10-19.

How severe is CVE-2018-12671?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Information disclosure in Sv3c H.264 Poe Ip Camera Firmware

CVE-2018-12671

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface.

Vulnerability class: Information Disclosure

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Sv3c H.264_poe_ip_camera_firmware — versions v2.3.4.2103-s50-ntd-b20170508b, v2.3.4.2103-s50-ntd-b20170823b
Sv3c Sv-b01poe-1080p-l
Sv3c Sv-b11vpoe-1080p-l
Sv3c Sv-d02poe-1080p-l
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-12671?: CVE-2018-12671 is a critical-severity vulnerability in Sv3c H.264 Poe Ip Camera Firmware, classified under Information Disclosure. CVSS score: 9.8/10. Published 2018-10-19.
How severe is CVE-2018-12671?: Critical severity. CVSS v3 base score is 9.8 out of 10.