[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRGyweEGC9UT1Y0FccFxzfWmDKiKwYXHDN9ju1J-a2Tw":3,"g5a-risk:CVE-2018-18767":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":57,"references":58,"referencesCount":27,"weaknesses":65,"weaknessesCount":27,"isActivelyExploited":74,"cisaInfo":15,"otxData":15,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":120,"notableEvents":121},"CVE-2018-18767","What is CVE-2018-18767?","An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lullabies), it communicates directly with the Wi-Fi camera (D-Link 825L firmware 1.08) with the credentials (username and password) in base64 cleartext. An attacker could conduct an MitM attack on the local network and very easily obtain these credentials.","An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or play lulla...","2018-12-20T23:29:00.863","2023-04-26T19:36:57.87",7,"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","HIGH","LOW","NONE","UNCHANGED",1,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":34,"Authentication":25,"ConfidentialityImpact":35,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",1.9,3.4,2.9,0.0063,[39,39,39,39,39,39,39],"High",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"dlink","mydlink_baby_camera_monitor","2.04.06","cpe:2.3:a:dlink:mydlink_baby_camera_monitor:2.04.06:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"d-link","dcs-825l_firmware","1.08","cpe:2.3:o:d-link:dcs-825l_firmware:1.08:*:*:*:*:*:*:*",{"vendor":44,"product":54,"version":55,"criteria":56,"vulnerable":4},"dcs-825l","-","cpe:2.3:h:dlink:dcs-825l:-:*:*:*:*:*:*:*",3,[59],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fdojo.bullguard.com\u002Fdojo-by-bullguard\u002Fblog\u002Fi-got-my-eyeon-you-security-vulnerabilities-in-baby-monitor\u002F","Bullguard",[63,64],"Exploit","Third Party Advisory",[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2018-18767? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18767, a high severity cyber security vulnerability from 2018. An issue was discovered in D-Link 'myDlink Baby App' versio...","CVE-2018-18767, CVE-2018-18767 vulnerability, CVE-2018-18767 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, dlink security, d-link security, mydlink_baby_camera_monitor vulnerability, dcs-825l_firmware vulnerability, dcs-825l vulnerability","\u002Fwhat-is\u002Fcve-2018-18767",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18767","Cybersecurity","CVE-2018-18767, CVE-2018-18767 vulnerability, CVE-2018-18767 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102,109],{"Operator":15,"Negate":15,"Nodes":103},[104],{"Operator":105,"Negate":15,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":108,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3CADA4EC-9AD8-4471-9DD8-21FC1D55D703",{"Operator":110,"Negate":15,"Nodes":111},"AND",[112,116],{"Operator":105,"Negate":15,"CPEMatch":113},[114],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"77A4A4BA-CD75-4DF2-8A90-302B16EC378F",{"Operator":105,"Negate":15,"CPEMatch":117},[118],{"Vulnerable":15,"Criteria":56,"MatchCriteriaID":119,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"465C691A-5068-474F-9BCF-D3CD99388EE4",[],[],{"lastModified":11,"cacheTime":123,"version":32},1792272333961,{"score":125,"band":126,"action":127,"scoredAt":128},42,"Medium","Plan remediation","2026-10-16T06:45:18.288957+00:00"]