PT-2020-16705 · Basetech · Basetech Ge-131

Published 2020-11-17 · Updated 2021-07-21 · CVE-2020-27557

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921

Description The issue allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials. This is due to an Unprotected Storage of Credentials vulnerability.

Recommendations For BASETech GE-131 BT-1837836 firmware version 20180921, consider restricting access to the SQLite files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-27557

Affected Products

Basetech Ge-131

References · 9

• 🔥 https://infosec.rm-it.de/2020/11/04/basetech-ip-camera-analysis/#vulns · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27557 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27557 · Vendor Advisory
• https://t.me/cibsecurity/17332 · Telegram Post
• https://t.me/cvenotify/6448 · Telegram Post
• https://t.me/cibsecurity/17324 · Telegram Post
• https://t.me/cibsecurity/17318 · Telegram Post
• https://t.me/cibsecurity/16452 · Telegram Post
• https://t.me/cibsecurity/17320 · Telegram Post