ZeroHour

CVE-2018-12672

PoC
CVSS 3.0
5.4 medium
EPSS
<1%p44
Published
()
Modified
Description

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or the administrator.

Vendors
sv3c
Products
h.264 poe ip camera firmware
Weakness
CWE-79
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.