PT-2010-5373 · Camtron+1 · Camtron Cmnc-200+1

Published 2010-11-16 · Updated 2018-10-10 · CVE-2010-4233

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera firmware 1.102A-008

Description The issue allows remote attackers to obtain access via the TELNET interface due to default passwords for the root and mg3500 accounts. The default password for the root account is m, and the default password for the mg3500 account is merlin.

Recommendations For Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008, change the default passwords for the root and mg3500 accounts to secure passwords. As a temporary workaround, consider disabling the TELNET interface until secure passwords are set.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-4233

Affected Products

Camtron Cmnc-200

Tecvoz Cmnc-200

References · 5

• 🔥 https://trustwave.com/spiderlabs/advisories/TWSL2010-006.txt · Exploit
• 🔥 https://exploit-db.com/exploits/15507 · Exploit
• 🔥 http://exploit-db.com/exploits/15507 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4233 · Security Note
• http://securityfocus.com/archive/1/514753/100/0/threaded · Note