CVE-2018-12499

The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorola MBP853 camera and the servers it communicates with. In one such instance, it was identified that the device was downloading what appeared to be a client certificate.

• CWE-295

• https://blog.sean-wright.com/cve-2018-12499/Third Party Advisory
• https://blog.sean-wright.com/cve-2018-12499/Third Party Advisory

Published

Jul 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12491PHPOK 4.9.032 has an arbitrary file upload vulnerability in …
• CVE-2018-12492PHPOK 4.9.032 has an arbitrary file deletion vulnerability i…
• CVE-2018-12493An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-12494An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-12495The quoteblock function in markdown.c in libmarkdown.a in DI…
• CVE-2018-12498spider.admincp.php in iCMS v7.0.8 has SQL Injection via the …
• CVE-2018-1250Dell EMC Unity and UnityVSA versions prior to 4.3.1.15257030…6.5
• CVE-2018-12501Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335.
• CVE-2018-12503tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRIm…
• CVE-2018-12504tinyexr 0.9.5 has an assertion failure in ComputeChannelLayo…
• CVE-2018-1251Dell EMC Unity and UnityVSA versions prior to 4.3.1.15257030…8.3
• CVE-2018-12511In the mintToken function of a smart contract implementation…