CVE-2018-10734

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain…

published May 8, 2018

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

🚨 A surprising backdoor in KONGTOP DVR devices could expose your login password just by triggering the right function! 🔥 Think of it like a hidden compartment in a safe that opens when you press a certain combination — only in this case, the combination is too easy to stumble upon! If exploited, an attacker could easily retrieve the login password, potentially granting them complete access to your device's settings and recorded footage. It’s a serious privacy breach just waiting to happen! 🔥

Put simply

Think of it like a hidden compartment in a safe that opens when you press a certain combination — only in this case, the combination is too easy to stumble upon! This vulnerability arises from a Print_Password function in the A303, A403, D303, D305, and D403 models that inadvertently reveals the login password under specific circumstances.

What to do

If exploited, an attacker could easily retrieve the login password, potentially granting them complete access to your device's settings and recorded footage. It’s a serious privacy breach just waiting to happen! 🔥 To mitigate this risk, check for firmware updates from KONGTOP and apply any patches that address this backdoor vulnerability. Additionally, consider changing default passwords immediately and implementing network isolation where possible. You've got this! With some quick action, you can secure your devices and keep your data safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01805 · 78.4th percentile
Published
2018-05-08T07:00Z
EPSS history
Timeline
  • 08 MAY 07:00Z
    KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain…
    cvelistv5