CVE-2013-3542

CRITICAL

10.0

Description

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

CVE Details

CVSS v3.1 Score10.0

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published12/11/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

grandstream:gxv3500grandstream:gxv3500_firmwaregrandstream:gxv3501grandstream:gxv3501_firmwaregrandstream:gxv3504grandstream:gxv3504_firmwaregrandstream:gxv3601grandstream:gxv3601_firmwaregrandstream:gxv3601hdgrandstream:gxv3601hd_firmwaregrandstream:gxv3601llgrandstream:gxv3601ll_firmwaregrandstream:gxv3611hdgrandstream:gxv3611hd_firmwaregrandstream:gxv3611llgrandstream:gxv3611ll_firmwaregrandstream:gxv3615pgrandstream:gxv3615p_firmwaregrandstream:gxv3615wgrandstream:gxv3615w_firmwaregrandstream:gxv3615wp_hdgrandstream:gxv3615wp_hd_firmwaregrandstream:gxv3651fhdgrandstream:gxv3651fhd_firmwaregrandstream:gxv3662hdgrandstream:gxv3662hd_firmware

Weaknesses (CWE)

CWE-798

References

http://seclists.org/fulldisclosure/2013/Jun/84(cve@mitre.org)

https://www.youtube.com/watch?v=XkCBs4lenhI(cve@mitre.org)

http://seclists.org/fulldisclosure/2013/Jun/84(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=XkCBs4lenhI(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.