What’s Vulnerable › Vulnerabilities

CVE-2018-20955

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-08 · updated 2026-06-17
• Weakness: CWE-798

Description

Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31.

Affected products

• Swann Swwhd-Intcam-Hd Firmware: all versions

References

• https://www.pentestpartners.com/security-blog/hacking-swann-home-security-camera-video/
• https://www.swann.com/au/safe-by-swann-upgrade
• https://www.pentestpartners.com/security-blog/hacking-swann-home-security-camera-video/
• https://www.swann.com/au/safe-by-swann-upgrade

Get alerted when CVE-2018-20955 or the next vulnerability affects your stack