CVE-2018-6295

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-319

Affected software

VendorProductVersions
Hanwha TechwinHanwha Techwin Smartcams7.55

References

Timeline

Published
Mar 13, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-62965.3An undocumented (hidden) capability for switching the web interface in Hanwha Techwin SmartcamsCVE-2018-62979.8Buffer overflow in Hanwha Techwin SmartcamsCVE-2018-62989.8Remote code execution in Hanwha Techwin SmartcamsCVE-2018-62999.8Authentication bypass in Hanwha Techwin SmartcamsCVE-2018-63009.8Remote password change in Hanwha Techwin SmartcamsCVE-2018-63017.5Arbitrary camera access and monitoring via cloud in Hanwha Techwin SmartcamsCVE-2018-63027.5Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin SmartcamsCVE-2018-63037.5Denial of service by uploading malformed firmware in Hanwha Techwin SmartcamsCVE-2018-63047.5Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of serviceCVE-2018-63057.5Denial of service in Gemalto's Sentinel LDK RTE version before 7.65CVE-2018-63067.8Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.CVE-2018-63078.1LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer ext
CVE-2018-6295: Critical severity, CVSS 9.8 | Vulnix