Lucene search

TwcertCVELIST:CVE-2023-38026

HistoryAug 28, 2023 - 3:29 a.m.

CVE-2023-38026 SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -2

2023-08-2803:29:08

CWE-798

twcert

www.cve.org

spotcam co.

ltd. remote attacker system operations uboot credentials disrupt service

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SpotCam FHD 2",
    "vendor": "SPOTCAM CO., LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "1.0036"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-7333-972ca-1.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

Related for CVELIST:CVE-2023-38026