You do not have permission to edit this page, for the following reasons:
The Hanwha Techwin SNH-V6410PN is an indoor PT Wi-Fi camera from the Smartcam line, now end of life. Its vulnerability record is the most damning of any device in this set: ten CVEs list snh-v6410pn directly in their CPE configurations, all from a single 2018 audit. CVE-2018-6298 scores CVSS 10.0 for remote code execution, and the rest of the set is barely less severe: authentication bypass (CVE-2018-6299), buffer overflow (CVE-2018-6297), unencrypted remote control and communications (CVE-2018-6295), unsecured firmware update (CVE-2018-6294), a hidden web-interface switch (CVE-2018-6296), remote password change (CVE-2018-6300), arbitrary cloud camera access (CVE-2018-6301) and two denial-of-service paths. Read together they describe a product where every layer failed at once rather than a single coding slip. The decisive fact is that the camera is end of life and receives no firmware, so none of this can be patched, only mitigated by removing the device from the network. The device is rated F, and the arithmetic is stated: Device sums to 1+3+2+3 = 9, averaging 2.25 which rounds up to 3, with the updatability score of 3 reflecting that no update path exists; System sums to 3+3+3 = 9, averaging 3; User Authentication sums to 2+3+3+2+3 = 13, averaging 2.6 which rounds up to 3, giving a GRAS of 9. One value is deliberately conservative: device_prior_attacks is scored Rare because no specific exploitation campaign was located, even though an unauthenticated CVSS 10.0 RCE on an unmaintained internet-connected camera is precisely the profile that gets conscripted into botnets. Values for hardware tampering, storage encryption, account management, brute-force protection and event logging are provisional because no model-level Hanwha documentation could be retrieved.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
