Hardcoded Authentication Flaw in Grandstream Video Cameras
CVE-2013-3542

10CRITICAL

Key Information:

Vendor

Grandstream

Status
Gxv3501 Firmware
Vendor
CVE Published:
11 December 2019

What is CVE-2013-3542?

Grandstream's GXV series video cameras exhibit a vulnerability attributed to hardcoded credentials that allow remote attackers to gain unauthorized access through TELNET sessions. This security flaw affects multiple models with firmware version 1.0.4.11, making it crucial for users to ensure their devices are updated with the latest firmware to mitigate potential risks.

References

http://seclists.org/fulldisclosure/2013/Jun/84
x_refsource_MISC
https://www.youtube.com/watch?v=XkCBs4lenhI
x_refsource_MISC

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2013-3542 : Hardcoded Authentication Flaw in Grandstream Video Cameras