CVE-2018-12674 - CERT CVE
ID CVE-2018-12674
Sažetak The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in account.
Reference
CVSS
Base: 2.9
Impact: 2.9
Exploitability:5.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:A/AC:M/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 03-10-2019 - 00:03
Objavljeno 19-10-2018 - 22:29