Skip to main content

Snh V6410Pn Firmware CVE-2018-6294

CRITICAL
Improper Authentication (CWE-287)
2018-03-13 vulnerability@kaspersky.com
Authentication Bypass Snh V6410Pn Firmware Snh V6410Pnw Firmware
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 13, 2018 - 17:29 nvd
CRITICAL 9.8

DescriptionNVD

Unsecured way of firmware update in Hanwha Techwin Smartcams

AnalysisAI

Unsecured way of firmware update in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. Affected products include: Hanwha-Security Snh-V6410Pn Firmware, Hanwha-Security Snh-V6410Pnw Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Snh V6410Pn Firmware

View all
CVE-2018-6300 CRITICAL
9.8 Mar 13

Remote password change in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
CVE-2018-6299 CRITICAL
9.8 Mar 13

Authentication bypass in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), this vulnerability is remotely ex
CVE-2018-6298 CRITICAL
9.8 Mar 13

Remote code execution in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), this vulnerability is remotely ex
CVE-2018-6297 CRITICAL
9.8 Mar 13

Buffer overflow in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploita
CVE-2018-6295 CRITICAL
9.8 Mar 13

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams. Rated critical severity (CVSS 9.8), th
CVE-2018-6303 HIGH
7.5 Mar 13

Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams. Rated high severity (CVSS 7.5), this vuln
CVE-2018-6302 HIGH
7.5 Mar 13

Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams. Rated high sev
CVE-2018-6301 HIGH
7.5 Mar 13

Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams. Rated high severity (CVSS 7.5), this vulne
CVE-2018-6296 MEDIUM
5.3 Mar 13

An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams. Rated medium severity (

Same weakness CWE-287 – Improper Authentication

View all
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8
CVE-2024-53704 CRITICAL POC
9.8
CVE-2015-7755 CRITICAL POC
9.8
CVE-2013-0625 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2018-6294 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy