What’s Vulnerable › Vulnerabilities

CVE-2018-12667

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-10-19 · updated 2026-06-17
• Weakness: CWE-287

Description

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the configuration. The vulnerability affects all versions.

Affected products

• Sv3C H.264 Poe Ip Camera Firmware: v2.3.4.2103-s50-ntd-b20170508b, v2.3.4.2103-s50-ntd-b20170823b

References

• https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
• https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/

Get alerted when CVE-2018-12667 or the next vulnerability affects your stack