cve.bz

CVE-2018-12674

5.7 mediumEPSS 0.6%

Medium (5.7) in sv3c h.264 poe ip camera firmware. EPSS 0.6% chance of exploitation in the next 30 days.

The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in account.

Severity

CVSS 3.0

5.7 medium
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE
CWE-319
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON