critical9.8
CVE-2018-10734
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstan…
Impact
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kongtop | D303 Firmware | All versions |
| Kongtop | D305 Firmware | All versions |
| Kongtop | D403 Firmware | All versions |
| Kongtop | A303 Firmware | All versions |
| Kongtop | A403 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf
- https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf
- https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py
- https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf
- https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf
- https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py