CVE-2013-3542

CRITICAL

10.0

Beschreibung

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

CVE Details

CVSS v3.1 Bewertung10.0

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/11/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

grandstream:gxv3500grandstream:gxv3500_firmwaregrandstream:gxv3501grandstream:gxv3501_firmwaregrandstream:gxv3504grandstream:gxv3504_firmwaregrandstream:gxv3601grandstream:gxv3601_firmwaregrandstream:gxv3601hdgrandstream:gxv3601hd_firmwaregrandstream:gxv3601llgrandstream:gxv3601ll_firmwaregrandstream:gxv3611hdgrandstream:gxv3611hd_firmwaregrandstream:gxv3611llgrandstream:gxv3611ll_firmwaregrandstream:gxv3615pgrandstream:gxv3615p_firmwaregrandstream:gxv3615wgrandstream:gxv3615w_firmwaregrandstream:gxv3615wp_hdgrandstream:gxv3615wp_hd_firmwaregrandstream:gxv3651fhdgrandstream:gxv3651fhd_firmwaregrandstream:gxv3662hdgrandstream:gxv3662hd_firmware

Schwachen (CWE)

CWE-798

Referenzen

http://seclists.org/fulldisclosure/2013/Jun/84(cve@mitre.org)

https://www.youtube.com/watch?v=XkCBs4lenhI(cve@mitre.org)

http://seclists.org/fulldisclosure/2013/Jun/84(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=XkCBs4lenhI(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.