漏洞描述
SV3C HD Camera L Series 2.3.4.2103-S50-NTD-B20170508B and 2.3.4.2103-S50-NTD-B20170823B contains an open redirect vulnerability. It does not perform origin checks on URLs in the camera's web interface, which can be leveraged to send a user to an unexpected endpoint. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
bishopfox.comhttps://bishopfox.com/blog/sv3c-l-series-hd-camera-advisory↗vuldb.comhttps://vuldb.com/?id.125799↗www.bishopfox.comhttps://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2018-12675↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗