CVE Feed

    Dashboard / CVE / CVE-2018-11689

    CVE-2018-11689

    Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)

    Published:Jun 14, 2018
    Last Modified:Nov 21, 2024
    EPS:Jun 14, 2018
    EPSS Score:0.00556
    CVSS Score:6.1

    Affected Products

    Vendor
    Hanwha-security
    Product
    Hrd-1641
    Vendor
    Hanwha-security
    Product
    Hrd-1641 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-1642
    Vendor
    Hanwha-security
    Product
    Hrd-1642 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-440
    Vendor
    Hanwha-security
    Product
    Hrd-440 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-442
    Vendor
    Hanwha-security
    Product
    Hrd-442 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-443
    Vendor
    Hanwha-security
    Product
    Hrd-443 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-840
    Vendor
    Hanwha-security
    Product
    Hrd-840 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-841
    Vendor
    Hanwha-security
    Product
    Hrd-841 Firmware
    Vendor
    Hanwha-security
    Product
    Hrd-842
    Vendor
    Hanwha-security
    Product
    Hrd-842 Firmware
    Vendor
    Hanwha-security
    Product
    Srd-1694u
    Vendor
    Hanwha-security
    Product
    Srd-1694u Firmware
    Vendor
    Samsung
    Product
    Smartviewer

    Exploits

    http://www.securityfocus.com/archive/1/542083/100/0/threadedhttps://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharinghttps://seclists.org/bugtraq/2018/Jun/40http://www.securityfocus.com/archive/1/542083/100/0/threadedhttps://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharinghttps://seclists.org/bugtraq/2018/Jun/40

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High