PT-2018-18125

CVE-2018-7520

·

Published

2018-03-22

·

Updated

2020-10-02

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Geutebruck G-Cam/EFD-2250 version 1.12.0.4 Topline TopFD-2125 version 3.15.1
Description An improper access control issue has been identified, which could allow a full configuration download, including passwords.
Recommendations For Geutebruck G-Cam/EFD-2250 version 1.12.0.4, update to a newer version that addresses the improper access control issue. For Topline TopFD-2125 version 3.15.1, update to a newer version that addresses the improper access control issue. As a temporary workaround, consider restricting access to the camera's configuration settings until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2018-7520
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com