PT-2017-6618 · Trendnet · Trendnet Wifi Baby Cam Tv-Ip743Sic

Published 2017-04-10 · Updated 2017-04-14 · CVE-2015-2880

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet WiFi Baby Cam TV-IP743SIC

Description The issue concerns a hardcoded password for the root account. Specifically, the password is set to admin for the backdoor root account, which could allow unauthorized access.

Recommendations For TRENDnet WiFi Baby Cam TV-IP743SIC, consider changing the default password for the root account to a strong and unique password to prevent unauthorized access. As a temporary workaround, restrict access to the device until a more permanent solution is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2015-2880

Affected Products

Trendnet Wifi Baby Cam Tv-Ip743Sic

References · 2

• 🔥 https://community.rapid7.com/community/infosec/blog/2015/09/02/iotsec-disclosure-10-new-vulns-for-several-video-baby-monitors · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2880 · Security Note