PT-2026-3168 · Denver · Denver Shc-150 Smart Wifi Camera

Ivan Nikolsky · Published 2026-01-15 · Updated 2026-01-16 · CVE-2021-47796

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Denver SHC-150 Smart Wifi Camera (affected versions not specified)

Description The Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential issue that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system. The affected device allows full shell access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2021-47796

Affected Products

Denver Shc-150 Smart Wifi Camera

References · 6

• 🔥 https://exploit-db.com/exploits/50160 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47796 · Security Note
• http://old.denver.eu/products/smart-home-security/ip-camera-/indoor/c-1024/c-1245 · Note
• https://twitter.com/CVEnew/status/2012126494131159381 · Twitter Post
• https://vulncheck.com/advisories/denver-smart-wifi-camera-shc-telnet-remote-code-execution-rce · Note
• https://twitter.com/0dayPublishing/status/2011946795463496054 · Twitter Post