VULNERABILITY INTELLIGENCE

CVE-2018-16546

CVSS score5.9 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2018-09-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation, as demonstrated by Amcrest_IPC-HX1X3X-LEXUS_Eng_N_AMCREST_V2.420.AC01.3.R.20180206.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references