CVE-2018-12666

CVE-2018-12666 describes a critical authentication bypass vulnerability in SV3C L-SERIES HD Camera firmware versions, including sv3c h.264_poe_ip_camera_firmware and specific SV-B01POE, SV-B11VPOE, and SV-D02POE models. The flaw allows remote attackers to gain administrator access by manipulating the 'authLevel' cookie to '255', as the devices improperly rely solely on this client-side value for authentication. This vulnerability carries a CVSS v3 score of 9.8 (Critical), indicating a network-exploitable flaw with low attack complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is currently available and there is minimal community discussion or media coverage, the high FAUCET Risk Score of 80/100 suggests a significant potential for exploitation.