Integrity Check Vulnerability in Shenzen Tenda Technology IP Camera
CVE-2023-30356

7.5HIGH

Key Information:

Vendor

Tenda
Status
Cp3 Firmware
Vendor
CVE Published:
10 May 2023

What is CVE-2023-30356?

A significant security flaw has been identified in the Shenzen Tenda Technology IP Camera CP3, specifically in version V11.10.00.2211041355. This vulnerability stems from a lack of adequate integrity check mechanisms, which allows unauthorized users to upload and install modified firmware. Such an exploit could lead to unauthorized access, data leaks, and potential control over the device, posing serious risks to both user privacy and network security.

References

https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-30356 : Integrity Check Vulnerability in Shenzen Tenda Technology IP Camera