CVE-2018-9031

CRITICAL 9.8CVE-2018-9031 · Published 29/03/2018 · updated 17/06/2026

In short

CVE-2018-9031 is a CRITICAL (CVSS 9.8) vulnerability affecting sentry vision (tnlsoftsolutions).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sentry vision tnlsoftsolutions	`= 3.0= 3.1= 3.2`	No fix yet

Description

The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an "if(pwd ==" line in the HTML source code. This means, in effect, that authentication occurs only on the client side.

References

gist.github.com/pabloonicarres/c2c284ca7b025d629da39087445ed15d · Exploit
youtube.com/watch · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free