PatchTheCVEhanwha-security vulnerabilities
Recent CVEs affecting hanwha-security products. 12 tracked.
hanwha-security has 12 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-05. Highest priority: CVE-2018-6298 (score 62/100).
- CVE-2019-12223 HIGH 7.5 MITIGATE UPGRADE An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devic
- CVE-2018-6303 HIGH 7.5 MITIGATE MITIGATE Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams
- CVE-2018-6302 HIGH 7.5 MITIGATE MITIGATE Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams
- CVE-2018-6301 HIGH 7.5 MITIGATE MITIGATE Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
- CVE-2018-6300 CRITICAL 9.8 MITIGATE MITIGATE Remote password change in Hanwha Techwin Smartcams
- CVE-2018-6299 CRITICAL 9.8 MITIGATE MITIGATE Authentication bypass in Hanwha Techwin Smartcams
- CVE-2018-6298 CRITICAL 9.8 MITIGATE MITIGATE Remote code execution in Hanwha Techwin Smartcams
- CVE-2018-6297 CRITICAL 9.8 MITIGATE MITIGATE Buffer overflow in Hanwha Techwin Smartcams
- CVE-2018-6296 MEDIUM 5.3 MITIGATE MITIGATE An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams
- CVE-2018-6295 CRITICAL 9.8 MITIGATE MITIGATE Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
- CVE-2018-6294 CRITICAL 9.8 MITIGATE MITIGATE Unsecured way of firmware update in Hanwha Techwin Smartcams
- CVE-2018-11689 MEDIUM 6.1 MITIGATE UPGRADE Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS vi
FAQ
How do I fix hanwha-security vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hanwha-security being exploited right now?
None of the tracked hanwha-security CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hanwha-security CVE should I patch first?
CVE-2018-6298 currently ranks highest (62/100): Remote code execution in Hanwha Techwin Smartcams.