CVE-2013-3542
Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.
- Score
- CVSS 3.1 10.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2019-12-11
- Last modified
- 2024-08-06
- Weaknesses
- CWE-798
Affected products
- Gxv3500 Firmware (Grandstream)
- Gxv3501 Firmware (Grandstream)
- Gxv3504 Firmware (Grandstream)
- Gxv3601 Firmware (Grandstream)
- Gxv3601hd Firmware (Grandstream)
- Gxv3601ll Firmware (Grandstream)
- Gxv3611hd Firmware (Grandstream)
- Gxv3611ll Firmware (Grandstream)
- Gxv3615p Firmware (Grandstream)
- Gxv3615w Firmware (Grandstream)
- Gxv3615wp Hd Firmware (Grandstream)
- Gxv3651fhd Firmware (Grandstream)
- Gxv3662hd Firmware (Grandstream)
References
- http://seclists.org/fulldisclosure/2013/Jun/84
- https://www.youtube.com/watch?v=XkCBs4lenhI
