PT-2026-3168 · Denver · Denver Shc-150 Smart Wifi Camera

Ivan Nikolsky · Publicado 2026-01-15 · Atualizado 2026-01-16 · CVE-2021-47796

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Denver SHC-150 Smart Wifi Camera (affected versions not specified)

Description The Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential issue that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system. The affected device allows full shell access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2021-47796

Produtos afetados

Denver Shc-150 Smart Wifi Camera

Referências · 6

• 🔥 https://exploit-db.com/exploits/50160 · Exploit
• http://old.denver.eu/products/smart-home-security/ip-camera-/indoor/c-1024/c-1245 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-47796 · Nota de Segurança
• https://twitter.com/CVEnew/status/2012126494131159381 · Publicação no Twitter
• https://vulncheck.com/advisories/denver-smart-wifi-camera-shc-telnet-remote-code-execution-rce · Nota
• https://twitter.com/0dayPublishing/status/2011946795463496054 · Publicação no Twitter