sv3c records

10 published records for vendor sv3c.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-12670No exploit	SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection.sv3c · h.264 poe ip camera firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	3.3%	Oct 19, 2018
40Plan	CVE-2018-12666No exploit	SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cooksv3c · h.264 poe ip camera firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.8%	Oct 19, 2018
40Plan	CVE-2018-12668No exploit	SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password.sv3c · h.264 poe ip camera firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.6%	Oct 19, 2018
39Monitor	CVE-2018-12667No exploit	The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vusv3c · h.264 poe ip camera firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.4%	Oct 19, 2018
39Monitor	CVE-2018-12671No exploit	An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interfsv3c · h.264 poe ip camera firmware · CWE-200 Pre-auth Info leak	Critical9.8	—	1.2%	Oct 19, 2018
35Monitor	CVE-2018-12669No exploit	SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset sv3c · h.264 poe ip camera firmware	High8.8	—	1.4%	Oct 19, 2018
30Monitor	CVE-2018-12673No exploit	An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interfsv3c · h.264 poe ip camera firmware · CWE-200 Pre-auth Info leak	High7.5	—	1.2%	Oct 19, 2018
25Monitor	CVE-2018-12675Proof of concept	The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that sv3c · h.264 poe ip camera firmware · CWE-601 Pre-auth Open redirect	Medium6.1	—	3.1%	Oct 19, 2018
22Monitor	CVE-2018-12674No exploit	The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the sv3c · h.264 poe ip camera firmware · CWE-319 Pre-auth Weak crypto	Medium5.7	—	0.5%	Oct 19, 2018
21Monitor	CVE-2018-12672No exploit	The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to sv3c · h.264 poe ip camera firmware · CWE-79 XSS	Medium5.4	—	0.5%	Oct 19, 2018

CVE-2018-12670
40Plan
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection.
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Command injection
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12666
40Plan
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cook
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12668
40Plan
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12667
39Monitor
The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vu
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12671
39Monitor
An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interf
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Info leak
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12669
35Monitor
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset
HighCVSS 8.8No exploitEPSS 1%
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12673
30Monitor
An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interf
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12675
25Monitor
The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that
MediumCVSS 6.1Proof of conceptEPSS 3%
- Pre-auth
- Open redirect
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12674
22Monitor
The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the
MediumCVSS 5.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
sv3c · h.264 poe ip camera firmwareOct 19, 2018
CVE-2018-12672
21Monitor
The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to
MediumCVSS 5.4No exploitEPSS 0%
- XSS
sv3c · h.264 poe ip camera firmwareOct 19, 2018