hanwha-security records

14 published records for vendor hanwha-security.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
40Plan	CVE-2018-6298No exploit	Remote code execution in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware · CWE-20 pre-auth RCE	Critical9.8	3.5%Mar 13, 2018
39Monitor	CVE-2018-6299No exploit	Authentication bypass in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	1.3%Mar 13, 2018
39Monitor	CVE-2018-6297No exploit	Buffer overflow in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware · CWE-119 Pre-auth Memory safety	Critical9.8	1.1%Mar 13, 2018
39Monitor	CVE-2018-6300No exploit	Remote password change in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware Pre-auth	Critical9.8	1.1%Mar 13, 2018
39Monitor	CVE-2018-6294No exploit	Unsecured way of firmware update in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	1.1%Mar 13, 2018
39Monitor	CVE-2018-6295No exploit	Unencrypted way of remote control and communications in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware · CWE-319 Pre-auth Weak crypto	Critical9.8	0.7%Mar 13, 2018
31Monitor	CVE-2017-5168No exploit	An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.hanwha-security · smart security manager · CWE-22 pre-auth RCE Path traversal	High7.5	3.6%Feb 13, 2017
31Monitor	CVE-2019-12223No exploit	An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03.hanwha-security · srn-472s firmware · CWE-119 Pre-auth Memory safety Denial of service	High7.5	2.3%Sep 5, 2019
30Monitor	CVE-2017-5169No exploit	An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.hanwha-security · smart security manager · CWE-352 pre-auth RCE CSRF	High7.5	1.3%Feb 13, 2017
30Monitor	CVE-2018-6301No exploit	Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware Pre-auth	High7.5	1.0%Mar 13, 2018
30Monitor	CVE-2018-6302No exploit	Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware Pre-auth Denial of service	High7.5	1.0%Mar 13, 2018
30Monitor	CVE-2018-6303No exploit	Denial of service by uploading malformed firmware in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware Pre-auth Denial of service	High7.5	1.0%Mar 13, 2018
24Monitor	CVE-2018-11689No exploit	Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_loginsamsung · smartviewer · CWE-79 Pre-auth XSS	Medium6.1	1.5%Jun 14, 2018
21Monitor	CVE-2018-6296No exploit	An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcamshanwha-security · snh-v6410pn firmware Pre-auth	Medium5.3	0.7%Mar 13, 2018

CVE-2018-6298
40Plan
Remote code execution in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6299
39Monitor
Authentication bypass in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6297
39Monitor
Buffer overflow in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6300
39Monitor
Remote password change in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6294
39Monitor
Unsecured way of firmware update in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6295
39Monitor
Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2017-5168
31Monitor
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.
HighCVSS 7.5No exploitEPSS 3%
- pre-auth RCE
- Path traversal
hanwha-security · smart security managerFeb 13, 2017
CVE-2019-12223
31Monitor
An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03.
HighCVSS 7.5No exploitEPSS 2%
hanwha-security · srn-472s firmwareSep 5, 2019
CVE-2017-5169
30Monitor
An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior.
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- CSRF
hanwha-security · smart security managerFeb 13, 2017
CVE-2018-6301
30Monitor
Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6302
30Monitor
Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-6303
30Monitor
Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
hanwha-security · snh-v6410pn firmwareMar 13, 2018
CVE-2018-11689
24Monitor
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
samsung · smartviewerJun 14, 2018
CVE-2018-6296
21Monitor
An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
hanwha-security · snh-v6410pn firmwareMar 13, 2018