CVE-2023-30354

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-05-10

Last modified

2025-01-27

Weaknesses

CWE-319, CWE-798

Affected products

• Cp3 Firmware (Tenda)

References

• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_NCD.md
• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PBA.md