PT-2024-36797 · Longse · Longse Model Lbh30Fe200W

Adam Zambrzycki · Published 2024-07-09 · Updated 2024-08-01 · CVE-2024-5634

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Longse model LBH30FE200W cameras (affected versions not specified)

Description The issue concerns Longse model LBH30FE200W cameras and products based on this device, which use telnet passwords that follow a specific pattern. Once the pattern is known, it becomes relatively easy to brute-force the password. Additionally, every camera with the same firmware version shares the same password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2024-5634

Affected Products

Longse Model Lbh30Fe200W

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-5634 · Security Note
• https://cert.pl/en/posts/2024/07/CVE-2024-5631 · Note
• https://twitter.com/CveFindCom/status/1810705640626520505 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810663289329696794 · Twitter Post
• https://t.me/cvenotify/88364 · Telegram Post
• https://twitter.com/CVEnew/status/1810633345983984100 · Twitter Post
• https://cert.pl/posts/2024/07/CVE-2024-5631 · Note
• https://t.me/cvedetector/306 · Telegram Post
• https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 · Note
• https://t.me/cvenotify/86285 · Telegram Post