CVE-2019-10710

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's…

published April 23, 2019

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's cleartext WiFi credentials via a specific HTTP request. This affects certain devices labeled as HI3510, HI3518, LOOSAFE, LEVCOECAM, Sywstoda, BESDER, WUSONGLUSAN, GADINAN, Unitoptek, ESCAM, etc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01101 · 65.4th percentile
Published
2019-04-23T19:06Z
EPSS history
Timeline
  • 23 APR 19:06Z
    Insecure permissions in the Web management portal on all IP cameras based on Hisilicon Hi3510 firmware allow authenticated attackers to receive a network's…
    cvelistv5