CVE-2018-16546: Medium severity amcrest ipc-hx1x3x vulnerability
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by AmcrestIPC-HX1X3X-LEXUSEngNAMCRESTV2.420.AC01.3.R.20180206.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16546?
CVE-2018-16546 is a vulnerability that affects Amcrest networked devices.
What is the severity of CVE-2018-16546?
The severity of CVE-2018-16546 is medium with a severity value of 5.9.
How does CVE-2018-16546 affect Amcrest devices?
CVE-2018-16546 allows remote attackers to defeat cryptographic protection mechanisms on Amcrest devices by using a hardcoded SSL private key.
Is there a fix for CVE-2018-16546?
According to the provided reference, a fix for CVE-2018-16546 may be available. Please refer to the reference link for more information.
What is CWE-798?
CWE-798 refers to an Insufficient Verification of Data Authenticity vulnerability.