10
CVE-2013-3542
- EPSS 2.6%
- Veröffentlicht 11.12.2019 19:15:11
- Zuletzt bearbeitet 21.11.2024 01:53:51
- Erkennungen
LoginGrandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Grandstream ≫ Gxv3501 Firmware Version 1.0.4.11
Grandstream ≫ Gxv3504 Firmware Version 1.0.4.11
Grandstream ≫ Gxv3601 Firmware Version 1.0.4.11
Grandstream ≫ Gxv3601hd Firmware Version 1.0.4.11
Grandstream ≫ Gxv3601ll Firmware Version 1.0.4.11
Grandstream ≫ Gxv3611hd Firmware Version 1.0.4.11
Grandstream ≫ Gxv3611ll Firmware Version 1.0.4.11
Grandstream ≫ Gxv3615w Firmware Version 1.0.4.11
Grandstream ≫ Gxv3615p Firmware Version 1.0.4.11
Grandstream ≫ Gxv3651fhd Firmware Version 1.0.4.11
Grandstream ≫ Gxv3662hd Firmware Version 1.0.4.11
Grandstream ≫ Gxv3615wp Hd Firmware Version 1.0.4.11
Grandstream ≫ Gxv3500 Firmware Version 1.0.4.11
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.6% | 0.833 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
| NIST | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
http://seclists.org/fulldisclosure/2013/Jun/84
https://www.youtube.com/watch?v=XkCBs4lenhI