CVE-2018-6300

Remote password change in Hanwha Techwin Smartcams

published March 13, 2018

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

⚠️ A malicious user could change the password on your Hanwha Techwin Smartcam remotely, and no one would be the wiser! 🔑 Think of it like someone sneaking into your home, swapping out your door lock while you’re away, and leaving you locked out — it feels safe, but someone else has the keys now. If an attacker pulls this off, they could gain control of your Smartcam, potentially spying on you or even using it as a gateway into more secure areas of your home network. This could lead to serious privacy invasions and unauthorized surveillance, putting you and your family at risk.

Put simply

Think of it like someone sneaking into your home, swapping out your door lock while you’re away, and leaving you locked out — it feels safe, but someone else has the keys now. This vulnerability allows unauthorized users to change the password of a Hanwha Techwin Smartcam remotely without proper authentication, effectively granting them control over the device.

What to do

If an attacker pulls this off, they could gain control of your Smartcam, potentially spying on you or even using it as a gateway into more secure areas of your home network. This could lead to serious privacy invasions and unauthorized surveillance, putting you and your family at risk. To protect yourself, ensure your Smartcam firmware is updated to the latest version. Change the default credentials if you haven't already, and consider setting up a network firewall to limit access to your devices. Regularly review device logs for any unauthorized access attempts. You’ve got this! Stay vigilant, and follow these steps to secure your Smartcam. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.4th percentile
Published
2018-03-13T17:00Z
EPSS history
Timeline
  • 13 MAR 17:00Z
    Remote password change in Hanwha Techwin Smartcams
    cvelistv5