CVE-2018-10734 - KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances

Back Back to CVE browser

CRITICAL

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances

Published May 8, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.84%

Description

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf
x_refsource_MISCThird Party Advisory
https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf
x_refsource_MISCThird Party Advisory
https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf		x_refsource_MISCThird Party Advisory
https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf		x_refsource_MISCThird Party Advisory
https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py		x_refsource_MISCExploitThird Party Advisory