CVE-2023-30351

Summary

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service (or UART) by using the exposed credentials.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_RRA.md
• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PRA.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_RRA.md
• https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PRA.md

• ←Previous
• Next→