CVE-2018-12671

9.8 criticalEPSS 1.3%

Critical (9.8) in sv3c h.264 poe ip camera firmware. EPSS 1.3% chance of exploitation in the next 30 days.

An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sv3c:h.264_poe_ip_camera_firmware

References

https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/

Check your stack JSON