Default Password Leaves Longse NVR and Related Products Vulnerable to Hacking
CVE-2024-5632

Currently unrated

Key Information:

Vendor

Longse Technology

Status
Nvr3608pge2w
Zmb-01
Vendor
CVE Published:
9 July 2024
đź”” Create Longse Technology Vulnerability Alert

What is CVE-2024-5632?

Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit connect automatically, it is very probable for the default password to be left unchanged.

Affected Version(s)

NVR3608PGE2W 0

ZMB-01 0

References

https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodo...
product
https://cert.pl/en/posts/2024/07/CVE-2024-5631/
third-party-advisory
https://cert.pl/posts/2024/07/CVE-2024-5631/
third-party-advisory

Timeline

  • Vulnerability published

Credit

Adam Zambrzycki
.
CVE-2024-5632 : Default Password Leaves Longse NVR and Related Products Vulnerable to Hacking