What is the CVSS score of CVE-2018-18441?

CVE-2018-18441 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.9%.

Is there a public PoC exploit available for CVE-2018-18441?

Yes, a public proof-of-concept exploit is available for CVE-2018-18441. Prioritise patching immediately. EPSS: 1.9%.

Dcs 936L Firmware CVE-2018-18441

HIGH

Information Exposure (CWE-200)

2018-12-20 cve@mitre.org

Information Disclosure D-Link Dcs 936L Firmware Dcs 942L Firmware Dcs 8000Lh Firmware Dcs 942Lb1 Firmware Dcs 5222L Firmware Dcs 825L Firmware Dcs 2630L Firmware Dcs 820L Firmware Dcs 855L Firmware Dcs 2121 Firmware Dcs 5222Lb1 Firmware Dcs 5020L Firmware Dcs 930l Firmware Dcs 8100Lh Firmware Dcs 932l Firmware Dcs 2102 Firmware Dcs 933l Firmware Dcs 5030L Firmware

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Dec 20, 2018 - 23:29 nvd

HIGH 7.5

DescriptionNVD

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings.

AnalysisAI

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many more. There are many affected firmware versions starting from 1.00 and above. The configuration file can be accessed remotely through: <Camera-IP>/common/info.cgi, with no authentication. The configuration file include the following fields: model, product, brand, version, build, hw_version, nipca version, device name, location, MAC address, IP address, gateway IP address, wireless status, input/output settings, speaker, and sensor settings. Affected products include: D-Link Dcs-936L Firmware, Dlink Dcs-942L Firmware, D-Link Dcs-8000Lh Firmware, D-Link Dcs-942Lb1 Firmware, D-Link Dcs-5222L Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.