PT-2016-1284 · Zhuhai Raysharp · Zhuhai Raysharp Firmware

Junia Valente · Publicado 2016-02-18 · Atualizado 2016-03-07 · CVE-2015-8286

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zhuhai RaySharp firmware (affected versions not specified)

Description The issue concerns a hardcoded root password in the firmware, making it easier for remote attackers to gain access through a session on TCP port 23 or 9000. This could allow an attacker to obtain protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2016-00581

CVE-2015-8286

Produtos afetados

Zhuhai Raysharp Firmware

Referências · 8

• 🔥 http://seclists.org/bugtraq/2015/Jun/117 · Exploit
• 🔥 http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html · Exploit
• http://forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking · Nota
• http://kb.cert.org/vuls/id/899080 · Nota
• https://bdu.fstec.ru/vul/2016-00581 · Nota de Segurança
• https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root · Nota
• http://kb.cert.org/vuls/id/923388 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-8286 · Nota de Segurança