CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2018-11689
Medium (6.1). EPSS 1.6% chance of exploitation in the next 30 days.
Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hanwha-security:hrd-1641_firmware
- hanwha-security:hrd-1642_firmware
- hanwha-security:hrd-440_firmware
- hanwha-security:hrd-442_firmware
- hanwha-security:hrd-443_firmware
- hanwha-security:hrd-840_firmware
- hanwha-security:hrd-841_firmware
- hanwha-security:hrd-842_firmware
- hanwha-security:srd-1694u_firmware
- samsung:smartviewer
References
- http://www.securityfocus.com/archive/1/542083/100/0/threaded
- https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing
- https://seclists.org/bugtraq/2018/Jun/40
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689
- http://www.securityfocus.com/archive/1/542083/100/0/threaded