CVE-2018-6294

Unsecured way of firmware update in Hanwha Techwin Smartcams

• CWE-287

• https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/Technical Description, Third Party Advisory
• https://securelist.com/somebodys-watching-when-cameras-are-more-than-just-smart/84309/Technical Description, Third Party Advisory

Published

Mar 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6288Cross-site Request Forgery leading to Administrative account…
• CVE-2018-6289Configuration file injection leading to Code Execution as Ro…
• CVE-2018-6290Local Privilege Escalation in Kaspersky Secure Mail Gateway …
• CVE-2018-6291WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gat…
• CVE-2018-6292Remote Code Execution in Saperion Web Client version 7.5.2 8…
• CVE-2018-6293Arbitrary File Read in Saperion Web Client version 7.5.2 831…
• CVE-2018-6295Unencrypted way of remote control and communications in Hanw…
• CVE-2018-6296An undocumented (hidden) capability for switching the web in…
• CVE-2018-6297Buffer overflow in Hanwha Techwin Smartcams
• CVE-2018-6298Remote code execution in Hanwha Techwin Smartcams
• CVE-2018-6299Authentication bypass in Hanwha Techwin Smartcams
• CVE-2018-6300Remote password change in Hanwha Techwin Smartcams