CVE Vulnerability

CVE-2018-11689

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 parameter. (The same Web Viewer codebase was transitioned from Samsung to Hanwha.)

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689 Third Party Advisory
http://www.securityfocus.com/archive/1/542083/100/0/threaded Exploit Third Party Advisory
https://seclists.org/bugtraq/2018/Jun/40 Exploit Mailing List
https://drive.google.com/file/d/1aWbvdrx1KRkUv4ikkm530a2N5qrxCLmr/view?usp=sharing Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:samsung:smartviewer:-:*:*:*:*:*:*:*
Information

Published : 2018-06-14 08:29

Updated : 2022-04-24 01:54

NVD link : CVE-2018-11689

Mitre link : CVE-2018-11689

Products Affected
No products.
CWE
CWE-79