[CVE-2018-12666] SV3C L-Series HD Camera – Multiple Vulnerabilities
bishopfox.com | advisory | CVE-2018-12666 | #authentication-bypass | #ip-camera | #command-injection | #iot-security | #vulnerability-advisory | #sv3c
Summary
Ten vulnerabilities in SV3C L-Series HD cameras, including a cookie-based admin login bypass and unauthenticated CGI access, allow full device compromise; no fix was available.
- CVE
- CVE-2018-12666
- Published
- Collected
--- id: 4212 title: "[CVE-2018-12666] SV3C L-Series HD Camera – Multiple Vulnerabilities" cve: CVE-2018-12666 source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/sv3c-l-series-hd-camera-advisory" published_at: "2018-10-16T00:00:00Z" tags: ["authentication-bypass", "ip-camera", "command-injection", "iot-security", "vulnerability-advisory", "sv3c"] phying_url: "https://phying.com/item/4212" lang: en --- # [CVE-2018-12666] SV3C L-Series HD Camera – Multiple Vulnerabilities ## Summary Ten vulnerabilities in SV3C L-Series HD cameras, including a cookie-based admin login bypass and unauthenticated CGI access, allow full device compromise; no fix was available. ## Intelligence Metadata - **Sources:** bishopfox.com - **CVE:** CVE-2018-12666 - **Published:** 2018-10-16T00:00:00Z - **Original:** https://bishopfox.com/blog/sv3c-l-series-hd-camera-advisory - **Phying News:** https://phying.com/item/4212