CVE-2018-6295 Weak cryptography in Hanwha Techwin Smartcams
Attackers can intercept unencrypted remote control and communication traffic on Hanwha Techwin Smartcams, exposing sensitive data and allowing potential manipulation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-6295?
CVE-2018-6295 is a critical vulnerability in Hanwha Techwin Smartcams, published on 13 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
Weakness: CWE-319
Which versions are affected by CVE-2018-6295?
It affects 2 products.
Products include Hanwha-Security Snh-V6410pn Firmware, Hanwha-Security Snh-V6410pnw Firmware.
How do I fix CVE-2018-6295?
No fix has been published for CVE-2018-6295 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6295 being exploited?
There is no known exploitation of CVE-2018-6295 in the wild and no public exploit code.
Other vulnerabilities in Hanwha Techwin Smartcams
Sources
Also known as GHSA-ppj9-vxcm-g25f.