CVE-2018-10734: Kongtop a303 Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.

Affected products

• Kongtop a303 Firmware: affected versions not specified
• Kongtop a403 Firmware: affected versions not specified
• Kongtop d303 Firmware: affected versions not specified
• Kongtop d305 Firmware: affected versions not specified
• Kongtop d403 Firmware: affected versions not specified

Published 2018-05-08. Last modified 2026-06-17.