CVE-2018-9995
CRITICAL 9.8EPSS 82.6%
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
- CVSS v3.0
- 9.8 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 82.61% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- critical
- Published
- 2018-04-10
- Updated
- 2024-08-05
Proof-of-concept exploits (30)
- https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch…
- ABIZCHI/CVE-2018-9995_dvr_credentials0★ · 2019-05-28
- CriptonDario/DVR-camaras-de-seguridad0★ · 2024-11-25
- Cyb0r9/DVR-Exploiter112★ · 2018-10-11
- IHA114/CVE-2018-9995_dvr_credentials1★ · 2019-06-16
- K3ysTr0K3R/CVE-2018-9995-EXPLOIT9★ · 2023-08-21
- LeQuocKhanh2K/Tool_Exploit_Password_Camera_CVE-2018-99950★ · 2022-05-12
- MrAli-Code/CVE-2018-9995_dvr_credentials1★ · 2019-06-16
- MrScytheLULZ/IdkLuLz-Python-0★ · 2018-08-17
- Saeed22487/CVE-2018-99951★ · 2020-06-13
- Satcomx00-x00/Camera-CamSploit0★ · 2020-11-17
- TateYdq/CVE-2018-9995-ModifiedByGwolfs0★ · 2019-04-20
- Zackmk1975/CVE0★ · 2021-12-13
- arminarab1999/CVE-2018-99950★ · 2024-02-09
- b510/CVE-2018-9995-POC1★ · 2019-12-16
- batmoshka55/CVE-2018-9995_dvr_credentials0★ · 2024-12-08
- carlos-fernando-yanquee-94/DVR_Exploiter-master-clon0★ · 2021-06-09
- codeholic2k18/CVE-2018-99952★ · 2019-01-28
- dearpan/cve-2018-99950★ · 2021-12-02
- dino213dz/cameraDVRTester0★ · 2024-05-09
- ezelf/CVE-2018-9995_dvr_credentials557★ · 2019-01-23
- gwolfs/CVE-2018-9995-ModifiedByGwolfs2★ · 2018-05-21
- kienquoc102/CVE-2018-9995-24★ · 2021-11-15
- likaifeng0/CVE-2018-9995_dvr_credentials-dev_tool0★ · 2019-09-05
- sjomurodov/getDVR0★ · 2018-05-20
- tausifzaman/cctv-hack7★ · 2025-08-23
- thaipc2021/camera0★ · 2021-07-27
- 0xDamian/CVE-2018-9995-rs
- F7P-H4NN1B4L/CVE-2018-9995-DVR-Credentials-Extractor
- mesutozsoycom/cve-2018-9995
Nuclei templates (1)
ExploitDB entries (1)
Exploit collections (2)
- chaitin/xray/blob/master/pocs/dvr-cve-2018-9995.yml
- zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2018/CVE-2018-9995.yaml