CVE-2013-3542

Published: Dec 11, 2019Modified: Nov 21, 2024

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: NVD

Description

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

Affected (13)

Products: Grandstream: Gxv3501 Firmware, Gxv3504 Firmware, Gxv3601 Firmware, Gxv3601hd Firmware, Gxv3601ll Firmware, Gxv3611hd Firmware, Gxv3611ll Firmware, Gxv3615w Firmware, Gxv3615p Firmware, Gxv3651fhd Firmware, Gxv3662hd Firmware, Gxv3615wp Hd Firmware, Gxv3500 Firmware

13 products

Gxv3615wp Hd Firmware

Gxv3500 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3501 Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3501	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3504 Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3504	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3601 Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3601	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3601hd Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3601hd	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3601ll Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3601ll	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3611hd Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3611hd	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3611ll Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3611ll	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3615w Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3615w	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3615p Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3615p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3651fhd Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3651fhd	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3662hd Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3662hd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3615wp Hd Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3615wp Hd	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Grandstream Gxv3500 Firmware	Version 1.0.4.11

Running on/with	Platform Versions
Grandstream Gxv3500	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

http://seclists.org/fulldisclosure/2013/Jun/84

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://www.youtube.com/watch?v=XkCBs4lenhI

Source: cve@mitre.org

ExploitThird Party Advisory

http://seclists.org/fulldisclosure/2013/Jun/84

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.youtube.com/watch?v=XkCBs4lenhI

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.