CVE-2018-6407

An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices. An unauthenticated attacker can crash a device by sending a POST request with a huge body size to /hy-cgi/devices.cgi?cmd=searchlandevice. The crash completely freezes the device.

• CWE-20

• https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/Third Party Advisory
• https://github.com/dreadlocked/ConceptronicIPCam_MultipleVulnerabilities/Third Party Advisory

Published

Jan 30, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6398SQL Injection exists in the CP Event Calendar 3.0.1 componen…
• CVE-2018-6400Kingsoft WPS Office Free 10.2.0.5978 allows local users to g…
• CVE-2018-6401Meross MSS110 devices before 1.1.24 contain a TELNET listene…
• CVE-2018-6402Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenti…7.5
• CVE-2018-6405In the ReadDCMImage function in coders/dcm.c in ImageMagick …6.5
• CVE-2018-6406The function ParseVP9SuperFrameIndex in common/libwebm_util.…
• CVE-2018-6408An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.…
• CVE-2018-6409An issue was discovered in Appnitro MachForm before 4.2.3. T…
• CVE-2018-6410An issue was discovered in Appnitro MachForm before 4.2.3. T…
• CVE-2018-6411An issue was discovered in Appnitro MachForm before 4.2.3. W…
• CVE-2018-6412In the function sbusfb_ioctl_helper() in drivers/video/fbdev…
• CVE-2018-6413There is a buffer overflow in the Hikvision Camera DS-2CD911…