High severity · published Dec 20, 2018
CVE-2018-18767
An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06
7.0
CVSS
0.6%
EPSS
No
On KEV
Description
An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi-Fi camera (D-Link 825L firmware 1.08) with the credentials (username and password) in base64 cleartext. An attacker could conduct an MitM attack on the local network and very easily obtain these credentials.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dcs-825l Firmware · D-link
1.08 · source: NVD
MB
Mydlink Baby Camera Monitor · Dlink
2.04.06 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-18767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-18767
Exploit
https://dojo.bullguard.com/dojo-by-bullguard/blog/i-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor/
More from Dcs-825l Firmware
7.5
CVE-2018-18442
D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks
7.5
CVE-2018-18441
D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration