CVE-2018-18767
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-18767
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi-Fi camera (D-Link 825L firmware 1.08) with the credentials (username and password) in base64 cleartext. An attacker could conduct an MitM attack on the local network and very easily obtain these credentials.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
D-Link myDlink Baby App 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
D-Link myDlink Baby App是友讯（D-Link）公司的一款用于管理控制D-Link婴儿监视器的应用程序。 D-Link myDlink Baby App 2.04.06版本中存在安全漏洞，该漏洞源于当使用该应用程序执行操作时（例如，修改摄像头设置或播放摇篮曲），程序用base64编码的明文凭证（用户名和密码）直接与Wi-Fi摄像头（采用1.08版本固件的D-Link 825L）通信。本地攻击者可通过实施中间人攻击利用该漏洞获取凭证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-18767
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-18767
请登录查看更多情报信息。
Same Patch Batch · n/a · 2018-12-20 · 97 CVEs total
| CVE-2018-1000876 | GNU Binutils 输入验证错误漏洞 | |
| CVE-2018-1000873 | FasterXML Jackson 输入验证错误漏洞 | |
| CVE-2018-1000871 | HotelDruid SQL注入漏洞 | |
| CVE-2018-1000867 | WeBid SQL注入漏洞 | |
| CVE-2018-1000860 | phpIPAM 跨站脚本漏洞 | |
| CVE-2018-1000858 | GnuPG 跨站请求伪造漏洞 | |
| CVE-2018-1000857 | log-user-session 路径遍历漏洞 | |
| CVE-2018-1000856 | DomainMod 跨站脚本漏洞 | |
| CVE-2018-1000868 | WeBid 跨站脚本漏洞 | |
| CVE-2018-1000875 | Berkeley Open Infrastructure 安全漏洞 | |
| CVE-2018-1000874 | PHP Markdown 跨站脚本漏洞 | |
| CVE-2018-1000877 | libarchive 安全漏洞 | |
| CVE-2018-1000878 | libarchive 资源管理错误漏洞 | |
| CVE-2018-1000879 | libarchive 代码问题漏洞 | |
| CVE-2018-1000880 | libarchive 资源管理错误漏洞 | |
| CVE-2018-1000881 | Traccar Traccar Server 代码注入漏洞 | |
| CVE-2018-1000882 | WeBid 路径遍历漏洞 | |
| CVE-2018-19233 | COMPAREX Miss Marple Enterprise Edition 安全漏洞 | |
| CVE-2018-19234 | COMPAREX Miss Marple Enterprise Edition Miss Marple Updater Service 输入验证错误漏洞 | |
| CVE-2018-1000883 | Elixir Plug Plug 安全漏洞 |
Showing top 20 of 97 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-18767
No comments yet