CVE-2018-12670 - OpenCVE

SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:L/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Sv3c	Sv-b01poe-1080p-l Sv-b11vpoe-1080p-l Sv-d02poe-1080p-l H.264 Poe Ip Camera Firmware

Configuration 1 [-]

AND

cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170508b:*:*:*:*:*:*:*

OR	cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:::::::*
	cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:::::::*
	cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170823b:*:*:*:*:*:*:*

OR	cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:::::::*
	cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:::::::*
	cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:::::::*

References

Link	Resource
https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2018-10-19T22:00:00

Updated: 2018-10-19T21:57:01

Reserved: 2018-06-22T00:00:00

Link: CVE-2018-12670

JSON object: View

NVD Information

Status : Analyzed

Published: 2018-10-19T22:29:00.647

Modified: 2019-01-09T19:40:10.027

Link: CVE-2018-12670

JSON object: View

Redhat Information

No data.

CWE

CWE-78

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170508b:*:*:*:*:*:*:*", "matchCriteriaId": "04629989-19B2-4918-8BF0-595A0D41AF15", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "75735EC9-F77D-4631-AD88-05832AEBBDFF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "D34E8126-3534-4675-AC35-10108A27DF81", "vulnerable": false}, {"criteria": "cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "14196DC9-EC58-4398-BE34-214ABCC39DE8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:sv3c:h.264_poe_ip_camera_firmware:v2.3.4.2103-s50-ntd-b20170823b:*:*:*:*:*:*:*", "matchCriteriaId": "217C05D7-FD38-4BF4-8CD4-6DB6D3BA208D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sv3c:sv-b01poe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "75735EC9-F77D-4631-AD88-05832AEBBDFF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sv3c:sv-b11vpoe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "D34E8126-3534-4675-AC35-10108A27DF81", "vulnerable": false}, {"criteria": "cpe:2.3:h:sv3c:sv-d02poe-1080p-l:-:*:*:*:*:*:*:*", "matchCriteriaId": "14196DC9-EC58-4398-BE34-214ABCC39DE8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection."}, {"lang": "es", "value": "Las c\u00e1maras HD de SV3C L-SERIES V2.3.4.2103-S50-NTD-B20170508B y V2.3.4.2103-S50-NTD-B20170823B permiten la inyecci\u00f3n de comandos del sistema operativo."}], "id": "CVE-2018-12670", "lastModified": "2019-01-09T19:40:10.027", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-10-19T22:29:00.647", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}