CVE-2018-12675

CVE-2018-12675 describes an open redirect vulnerability in SV3C HD Camera L-SERIES firmware versions V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B. This flaw allows an attacker to redirect users to arbitrary, untrusted websites due to the camera's web interface failing to perform origin checks on URLs. Rated with a CVSS score of 6.1 (Medium), this vulnerability requires user interaction (UI:R) and can be exploited over the network (AV:N) with low attack complexity (AC:L). Successful exploitation could lead to information disclosure (C:L) and integrity compromise (I:L), as users might be tricked into visiting malicious sites. While there is no evidence of active exploitation or Metasploit modules, a Nuclei template exists for detecting this open redirect. Community discussion and media coverage are minimal, indicating low public awareness and a lack of widespread attention.