CVE-2018-5560

A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.

Score

CVSS 3.0 10.0 Critical

Status

Modified - cve@rapid7.com

Published

2019-01-31

Last modified

2024-09-16

Weaknesses

CWE-798

Affected products

• Gz521w Firmware (Guardzilla)
• Guardzilla All-in-one Video Security System (Practecol Llc)

References

• https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/
• https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/