CVE-2018-16225

The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the…

published September 18, 2018

CVSS
—
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and disable the camera.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.8th percentile
Published
2018-09-18T21:00Z
EPSS history
Timeline
  • 18 SEP 21:00Z
    The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the…
    cvelistv5