Lucene search
Rapid7CVELIST:CVE-2018-5560HistoryJan 31, 2019 - 9:00 p.m.
CVE-2018-5560 Guardzilla All-In-One Video Security System Hard-Coded Credential
2019-01-3121:00:00
CWE-798
rapid7
www.cve.org
1
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
9.3
Confidence
High
EPSS
0.007
Percentile
80.7%
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol’s Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
CNA Affected
[
{
"product": "Guardzilla All-In-One Video Security System",
"vendor": "Practecol, LLC",
"versions": [
{
"status": "affected",
"version": "2018"
}
]
}
]Related
prion
prion
Hardcoded credentials
2019-01-31 21:29:00
nvd
nvd
CVE-2018-5560
2019-01-31 21:29:00
threatpost
threatpost
Guardzilla Home Cameras Open to Anyone Wanting to Watch Their Footage
2018-12-28 16:12:13
cve
cve
CVE-2018-5560
2019-01-31 21:29:00
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
AI Score
9.3
Confidence
High
EPSS
0.007
Percentile
80.7%
Related for CVELIST:CVE-2018-5560