VULNERABILITY INTELLIGENCE

CVE-2018-16225

CVSS score6.5 MEDIUM

EPSS probability0.62%

CISA KEVNot currently listed

Published2018-09-18

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and disable the camera.

Weakness classification

CWE-319: Cleartext Transmission of Sensitive Information

Primary references

cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory