Cleartext Transmission of Sensitive Information

CVE-2018-6295

High

9.8/10

Summary

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-319 - Cleartext Transmission of Sensitive Information

The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References

Advisory Timeline

Published Mar 13, 2018