Skip to content
OpenAdvisories
Unscored CVE-2018-16546 EUVD-2018-8355GHSA-c5gc-77wf-jm29

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers t…

Published Sep 5, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.

References