What’s Vulnerable › Vulnerabilities

CVE-2019-10710

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-23 · updated 2026-06-17
• Weakness: CWE-732

Description

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda, BESDER, WUSONGLUSAN, GADINAN, Unitoptek, ESCAM, etc.

Affected products

• Hisilicon Hi3510 Firmware: all versions

References

• https://dojo.bullguard.com/dojo-by-bullguard/blog/cam-hi-risk/
• https://dojo.bullguard.com/dojo-by-bullguard/blog/cam-hi-risk/

Get alerted when CVE-2019-10710 or the next vulnerability affects your stack