PT-2019-10391 · Swann · Swwhd-Intcam-Hd

Alan Woodward + 6 · Publicado 2019-08-08 · Atualizado 2021-08-24 · CVE-2018-20955

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Swann SWWHD-INTCAM-HD devices (affected versions not specified)

Description The issue allows for FTP access as root due to the presence of the twipc root password. It is noted that all affected customers were migrated by 2020-08-31.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-20955

Produtos afetados

Swwhd-Intcam-Hd

Referências · 4

• 🔥 https://pentestpartners.com/security-blog/hacking-swann-home-security-camera-video · Exploit
• https://t.me/cvenotify/19985 · Publicação no Telegram
• https://swann.com/au/safe-by-swann-upgrade · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-20955 · Nota de Segurança