PT-2021-9426 · Svakom · Svakom Siime Eye

Beau Du Jour · Published 2021-02-08 · Updated 2024-08-01 · CVE-2020-11915

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14

Description An issue was discovered in the Svakom Siime Eye device. By sending a "set params.cgi?telnetd=1&save=1&reboot=1" request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root privileges via a reecam4debug default password. This default telnet password is the same across all Siime Eye devices. In order for the attack to be exploited, an attacker must be physically close in order to connect to the device's Wi-Fi access point.

Recommendations As a temporary workaround, consider disabling the telnet interface on the device until a patch is available. To prevent exploitation, restrict access to the device's Wi-Fi access point to minimize the risk of unauthorized access. Avoid using the default reecam4debug password for the telnet interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2020-11915

Affected Products

Svakom Siime Eye

References · 6

• 🔥 https://pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-camera-endoscope-yes-really · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11915 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11915 · Vendor Advisory
• https://t.me/cibsecurity/23202 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Jul/14 · Note
• https://t.me/cvenotify/9556 · Telegram Post