PT-2010-5373 · Camtron+1 · Camtron Cmnc-200+1

Publicado 2010-11-16 · Atualizado 2018-10-10 · CVE-2010-4233

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera firmware 1.102A-008

Description The issue allows remote attackers to obtain access via the TELNET interface due to default passwords for the root and mg3500 accounts. The default password for the root account is m, and the default password for the mg3500 account is merlin.

Recommendations For Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008, change the default passwords for the root and mg3500 accounts to secure passwords. As a temporary workaround, consider disabling the TELNET interface until secure passwords are set.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-4233

Produtos afetados

Camtron Cmnc-200

Tecvoz Cmnc-200

Referências · 5

• 🔥 https://trustwave.com/spiderlabs/advisories/TWSL2010-006.txt · Exploit
• 🔥 https://exploit-db.com/exploits/15507 · Exploit
• 🔥 http://exploit-db.com/exploits/15507 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4233 · Nota de Segurança
• http://securityfocus.com/archive/1/514753/100/0/threaded · Nota