Lucene search

K
cve[email protected]CVE-2010-4233
HistoryNov 17, 2010 - 1:00 a.m.

CVE-2010-4233

2010-11-1701:00:03
CWE-255
web.nvd.nist.gov
26
camtron
tecvoz
ip camera
linux
installation
default password
vulnerability
remote attackers
telnet interface
cve-2010-4233

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.

Affected configurations

NVD
Node
camtroncmnc-200_firmwareMatch1.102a-008
AND
camtroncmnc-200
Node
tecvozcmnc-200_firmwareMatch1.102a-008
AND
tecvozcmnc-200

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.3%