Hanwha-security Snh-v6410pn Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Hanwha-security Snh-v6410pn Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2018-6294 — CVSS 9.8 (critical): Unsecured way of firmware update in Hanwha Techwin Smartcams
• CVE-2018-6295 — CVSS 9.8 (critical): Unencrypted way of remote control and communications in Hanwha Techwin Smartcams
• CVE-2018-6297 — CVSS 9.8 (critical): Buffer overflow in Hanwha Techwin Smartcams
• CVE-2018-6298 — CVSS 9.8 (critical): Remote code execution in Hanwha Techwin Smartcams
• CVE-2018-6299 — CVSS 9.8 (critical): Authentication bypass in Hanwha Techwin Smartcams
• CVE-2018-6300 — CVSS 9.8 (critical): Remote password change in Hanwha Techwin Smartcams
• CVE-2018-6303 — CVSS 7.5 (high): Denial of service by uploading malformed firmware in Hanwha Techwin Smartcams
• CVE-2018-6301 — CVSS 7.5 (high): Arbitrary camera access and monitoring via cloud in Hanwha Techwin Smartcams
• CVE-2018-6302 — CVSS 7.5 (high): Denial of service by blocking of new camera registration on the cloud server in Hanwha Techwin Smartcams
• CVE-2018-6296 — CVSS 5.3 (medium): An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams