PT-2020-16703 · Basetech · Basetech Ge-131

Published 2020-11-17 · Updated 2021-07-21 · CVE-2020-27555

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921

Description The issue is related to the use of default credentials for the telnet server, allowing remote attackers to execute arbitrary system commands as the root user. This enables unauthorized access and control over the system.

Recommendations For BASETech GE-131 BT-1837836 firmware version 20180921, consider changing the default credentials for the telnet server to prevent unauthorized access. As a temporary workaround, restrict access to the telnet server until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2020-27555

Affected Products

Basetech Ge-131

References · 5

• 🔥 https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27555 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27555 · Vendor Advisory
• https://t.me/cvenotify/6408 · Telegram Post
• https://t.me/cibsecurity/16450 · Telegram Post