Outbreak Alert: Multiple Vendor Camera System Attack

[Bhumit_Mali]

FortiRecon provides outside-in coverage for risks toward customers.     External Attack Surface Management helps customers to identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise.     The Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides a realistic view of the impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc.
CVE ID	CVE-2016-20016
CVE Title	MVPower CCTV DVR Webshell Vulnerability
CVE Severity	High
ACI Reporting Coverage	2 Report (OSINT)
Additional References	4 articles referencing this CVE on the security blog 27 mentions on social media for this vulnerability.
EASM Scanner	No

CVE ID	CVE-2018-10661
CVE Title	Authorization bypass vulnerability In VDOO Axis Camera
CVE Severity	High
ACI Reporting Coverage	None
Additional References	3 article referencing possibly working exploit(s) for this vulnerability. 5 articles referencing this CVE on the security blog.  50 mentions on social media for this vulnerability.
EASM Scanner	No

CVE ID	CVE-2018-15745
CVE Title	Argus Surveillance DVR Directory Traversal vulnerability
CVE Severity	High
ACI Reporting Coverage	None
Additional References	2 article referencing possibly working exploit(s) for this vulnerability. 6 articles referencing this CVE on a security blog.  40 mentions on social media for this vulnerability.
EASM Scanner	No