Hanwhasecurity's vulnerability profile centers on a narrow line of network camera products, including the SNH-V6410 series and its associated management platform, with a consistent signal across authentication and access-control weaknesses. The observed exposure reflects input-validation and credential-management issues endemic to embedded security appliances; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hanwhasecurity over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-16524HIGH Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload a | Nov 6, 2017 | 8.8 | 64 | NO | YES |
CVE-2017-7912CRITICAL Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the devic | Apr 8, 2019 | 9.8 | 32 | NO | NO |
CVE-2018-6298CRITICAL Remote code execution in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 32 | NO | NO |
CVE-2018-6295CRITICAL Unencrypted way of remote control and communications in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 30 | NO | NO |
CVE-2018-6294CRITICAL Unsecured way of firmware update in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 29 | NO | NO |
CVE-2018-6300CRITICAL Remote password change in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 28 | NO | NO |
CVE-2018-6299CRITICAL Authentication bypass in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 28 | NO | NO |
CVE-2018-6297CRITICAL Buffer overflow in Hanwha Techwin Smartcams | Mar 13, 2018 | 9.8 | 28 | NO | NO |
CVE-2019-12223HIGH An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by sub | Sep 5, 2019 | 7.5 | 25 | NO | NO |
CVE-2017-5169HIGH An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist w | Feb 13, 2017 | 7.5 | 24 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hanwhasecurity.
Media articles that mention a CVE ID that affects a product developed by Hanwhasecurity — matched by CVE ID, not by vendor name.