PT-2018-11323
CVE-2018-12672
·
تاريخ النشر
2018-10-19
·
تاريخ التحديث
2019-01-11
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SV3C HD Camera version L-SERIES V2.3.4.2103-S50-NTD-B20170508B
Description
The issue concerns a lack of proper validation on user-supplied input, making the camera susceptible to cross-site scripting attacks. This could potentially allow actions to be performed on behalf of another user or the administrator if proper authorization was in place.
Recommendations
For version L-SERIES V2.3.4.2103-S50-NTD-B20170508B, consider implementing proper input validation to prevent cross-site scripting attacks. As a temporary workaround, restrict access to the camera's web interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾