CVE-2018-10734 - Vulnerability Details - OpenCVE

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Kongtop	A303 A303 Firmware A403 A403 Firmware D303 D303 Firmware D305 D305 Firmware D403 D403 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:kongtop:d303_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kongtop:d303:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:kongtop:d305_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kongtop:d305:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:kongtop:d403_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kongtop:d403:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:kongtop:a303_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kongtop:a303:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:kongtop:a403_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:kongtop:a403:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf
https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf
https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-05-08T07:00:00

Updated: 2024-08-05T07:46:46.951Z

Reserved: 2018-05-04T00:00:00

Link: CVE-2018-10734

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-05-08T07:29:00.220

Modified: 2024-11-21T03:41:57.087

Link: CVE-2018-10734

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-05-08T00:00:00", "descriptions": [{"lang": "en", "value": "KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-08T07:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2018-10734", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf", "refsource": "MISC", "url": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf"}, {"name": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf", "refsource": "MISC", "url": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf"}, {"name": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py", "refsource": "MISC", "url": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T07:46:46.951Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-10734", "datePublished": "2018-05-08T07:00:00", "dateReserved": "2018-05-04T00:00:00", "dateUpdated": "2024-08-05T07:46:46.951Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kongtop:d303_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "24B4750A-AF80-48CD-8610-7AF4208350AD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kongtop:d303:-:*:*:*:*:*:*:*", "matchCriteriaId": "11F9E5AE-96DD-4AE1-9890-79CD76EF331D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kongtop:d305_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0912563D-75E0-4D85-A3FC-79447CFB96C9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kongtop:d305:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC51B9B1-90F6-4E33-8699-95957ACA3E26", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kongtop:d403_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "808CDD53-53B7-4A15-BE28-99A2E9433959", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kongtop:d403:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A0F0065-7D23-4646-B214-37F349078D17", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kongtop:a303_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "74BF8427-126E-41C6-AC1E-2D9A209F0EB9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kongtop:a303:-:*:*:*:*:*:*:*", "matchCriteriaId": "54A9B342-0966-4F04-A20C-999CB9F8D583", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:kongtop:a403_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "92BDE3AF-DAD5-48CE-9B7E-6981A7DC8BF2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:kongtop:a403:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEA28D97-3C7C-432F-A820-0FC72CF782D6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances."}, {"lang": "es", "value": "Los dispositivos KONGTOP DVR A303, A403, D303, D305 y D403 contienen un backdoor que imprime la contrase\u00f1a de inicio de sesi\u00f3n mediante una llamada a la funci\u00f3n Print_Password en determinadas circunstancias."}], "id": "CVE-2018-10734", "lastModified": "2024-11-21T03:41:57.087", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2018-05-08T07:29:00.220", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "[email protected]", "type": "Primary"}]}